CVE-2025-52516

An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. An invalid kernel address dereference in the issimian device driver leads to a denial of service.

CVSS v3 6.2 MEDIUM

6.2^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://semiconductor.samsung.com/support/quality-support/product-security-updates/	Vendor Advisory
https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-52516/	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:samsung:exynos_1330_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:exynos_1330:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:exynos_1380:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:samsung:exynos_1580_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:exynos_1580:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:samsung:exynos_2500_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:exynos_2500:-:*:*:*:*:*:*:*

History

19 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Se descubrió un problema en la Cámara de los procesadores móviles y para wearables Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500. Una desreferencia de dirección de kernel inválida en el controlador de dispositivo issimian conduce a una denegación de servicio.

Information

Published : 2026-01-05 19:15

Updated : 2026-10-19 21:10

NVD link : CVE-2025-52516

Mitre link : CVE-2025-52516

CVE.ORG link : CVE-2025-52516

JSON object : View

Products Affected

samsung

exynos_1330_firmware
exynos_1380
exynos_1480_firmware
exynos_1380_firmware
exynos_1480
exynos_1580
exynos_2500_firmware
exynos_2400
exynos_1580_firmware
exynos_2500
exynos_1330
exynos_2400_firmware

CWE

CWE-822

Untrusted Pointer Dereference

{"id": "CVE-2025-52516", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-52516", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-05T20:14:25.214678Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.5}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-01-05T19:15:56.417", "references": [{"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-52516/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-822"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. An invalid kernel address dereference in the issimian device driver leads to a denial of service."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en la C\u00e1mara de los procesadores m\u00f3viles y para wearables Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500. Una desreferencia de direcci\u00f3n de kernel inv\u00e1lida en el controlador de dispositivo issimian conduce a una denegaci\u00f3n de servicio."}], "lastModified": "2026-10-19T21:10:00.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:samsung:exynos_1330_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2635646-DD6A-4735-8E01-F45445584832"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:samsung:exynos_1330:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AA0F8A58-71B7-4503-A03A-6FB4282D75BD"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D381478B-C638-4663-BD71-144BE4B02E46"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:samsung:exynos_1380:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "61E72146-72FE-4B54-AB79-3C665E7F016C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64897B0D-EBF6-4BEB-BF54-ABCDBFAB45E0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F3F328B4-0442-4748-B5EE-DD1CEE50D6CF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:samsung:exynos_1580_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F3594664-3CE6-4827-ABD4-B5719817F5D5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:samsung:exynos_1580:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "93C1F9E8-DA04-4466-AF66-01560A07BD98"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16D9272E-1794-48FF-B6A4-8F48395BA38E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "932F5FB3-5527-44D7-9DD9-EF03963E3CA3"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:samsung:exynos_2500_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "121D726F-2925-48FE-9CE4-3686B0802DA8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:samsung:exynos_2500:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BA3794C2-9E77-4139-B188-26BDEA39DE21"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}