CVE-2025-62817
Published: 03 March 2026
Summary
CVE-2025-62817 is a high-severity NULL Pointer Dereference (CWE-476) vulnerability in Samsung Exynos 1280 Firmware. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 27.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SI-11 (Error Handling).
Deeper analysis
CVE-2025-62817, published on 2026-03-03, is a NULL pointer dereference vulnerability (CWE-476) discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500. The flaw occurs in the __pilot_parsing_ncp() function due to dereferencing session->ncp_hdr_buf when it is NULL, leading to a denial of service condition.
The vulnerability carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating it is exploitable over the network with low attack complexity, requiring no privileges or user interaction. Unauthenticated remote attackers can trigger the issue, achieving high-impact denial of service on affected Exynos processors without compromising confidentiality or integrity.
Samsung provides product security updates and mitigation details through its quality support portal at https://semiconductor.samsung.com/support/quality-support/product-security-updates/ and the dedicated CVE-2025-62817 page at https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-62817/. Security practitioners should consult these resources for patching guidance applicable to devices using the listed Exynos models.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-208239
Vulnerability details
An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500. A NULL pointer dereference of session->ncp_hdr_buf in __pilot_parsing_ncp() causes a denial of service.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Remote network-exploitable null dereference enables direct application/system crash for DoS via vulnerability exploitation.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly mitigates CVE-2025-62817 by requiring timely remediation of the NULL pointer dereference flaw through vendor patches provided by Samsung.
Addresses the core error handling deficiency in __pilot_parsing_ncp() by mandating checks for NULL pointers like session->ncp_hdr_buf before dereferencing to avoid DoS crashes.
Protects against the network-exploitable DoS from unauthenticated remote attackers triggering the NULL dereference via mechanisms like rate limiting and traffic filtering.