Information Disclosure and Denial of Service Vulnerability in Samsung Exynos Mobile Processors
CVE-2025-52519
7.1HIGH
What is CVE-2025-52519?
A security issue has been identified in the Camera component of Samsung's Exynos Mobile and Wearable Processors, including models such as Exynos 980, 990, and others. This vulnerability arises from inadequate validation of user-space input within the issimian device driver. Attackers can exploit this flaw to gain unauthorized access to sensitive information or trigger a denial of service, thereby disrupting the normal functionality of affected devices. Users and administrators are advised to apply security updates provided by Samsung to mitigate these risks.
References
CVSS V3.1
Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved