Input validation error in Samsung products - CVE-2025-54327
Published: November 3, 2025
Vulnerability identifier: #VU117927
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-54327
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to insufficient validation of user-supplied input in the VTS driver. A remote attacker can pass specially crafted input to the application and execute arbitrary code on the system.
Affected software
Exynos 1280
Exynos 2200
Exynos 1380
Exynos W920
Exynos W930
Exynos W1000
Exynos 2200
Exynos 1380
Exynos W920
Exynos W930
Exynos W1000
How to mitigate CVE-2025-54327
Install updates from vendor's website.