CVE-2025-52516CWE-822

CVE-2025-52516

Medium · published January 6, 2026

CVSS v3.1

6.2

EPSS

Percentile

2.6

In the wild

Unconfirmed

What it is

An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. An invalid kernel address dereference in the issimian device driver leads to a denial of service.

The record

Technical detail

CVSS v3.1: 6.2 · MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0: Not supplied
EPSS: 0.00133 · 2.6th percentile
Weakness: CWE-822 · Untrusted Pointer Dereference
Published: 2026-01-06T00:15Z

Affected products (6)

Product	Versions	Fixed in
samsung/exynos_1330_firmware	all versions	—
samsung/exynos_1380_firmware	all versions	—
samsung/exynos_1480_firmware	all versions	—
samsung/exynos_1580_firmware	all versions	—
samsung/exynos_2400_firmware	all versions	—
samsung/exynos_2500_firmware	all versions	—

References (2)

https://semiconductor.samsung.com/support/quality-support/product-security-updates/ · [email protected]https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-52516/ · [email protected]

EPSS history

Timeline

05 JAN 00:00Z
An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500
cvelistv5