CVE-2025-54335 Use after free in n/a
A use-after-free in the Exynos GPU driver allows attackers to execute arbitrary code or escalate privileges on affected Samsung mobile devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-54335?
CVE-2025-54335 is a medium-severity use after free vulnerability in Samsung Exynos 1480 Firmware, published on 4 Nov 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500. There is a use-after-free in the Xclipse GPU Driver.
Weakness: CWE-416
Which versions are affected by CVE-2025-54335?
It affects 4 products.
Products include Samsung Exynos 1480 Firmware, Samsung Exynos 1580 Firmware, Samsung Exynos 2400 Firmware, Samsung Exynos 2500 Firmware.
How do I fix CVE-2025-54335?
No fix has been published for CVE-2025-54335 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2025-54335 being exploited?
There is no known exploitation of CVE-2025-54335 in the wild and no public exploit code.
Other vulnerabilities in Samsung Exynos 1480 Firmware
Sources
Also known as GHSA-3jhf-jgrg-mcw3.