CVE-2025-62814
Published: 03 March 2026
Summary
CVE-2025-62814 is a high-severity NULL Pointer Dereference (CWE-476) vulnerability in Samsung Exynos 1280 Firmware. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 20.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
Threat & Defense at a Glance
Threat & Defense Details
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
NULL pointer dereference enables remote exploitation leading to system crash and denial of service (T1499.004 Application or System Exploitation).
NVD Description
An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, and 2400. A NULL pointer dereference of ft_handle in load_fw_utc_vector() causes a denial of service.
Deeper analysisAI
CVE-2025-62814 is a NULL pointer dereference vulnerability (CWE-476) discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, and 2400. The issue occurs in the load_fw_utc_vector() function when dereferencing a NULL ft_handle, resulting in a denial of service. It was published on 2026-03-03 with a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating high severity due to its potential for significant availability impact.
The vulnerability can be exploited remotely over the network by unauthenticated attackers with low complexity and no user interaction required. Successful exploitation leads to a denial of service, disrupting system availability without affecting confidentiality or integrity.
Samsung Semiconductor has published product security updates addressing this issue, available at https://semiconductor.samsung.com/support/quality-support/product-security-updates/ and the dedicated CVE page at https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-62814/. Security practitioners should consult these advisories for mitigation details and patching guidance specific to affected Exynos processors.
Details
- CWE(s)