CVE-2025-54601
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SAMSUNG Exynos 980等都是韩国三星（SAMSUNG）公司的产品。SAMSUNG Exynos 980是一款首个 5G 集成 Soc 产品，也是全球首款 A77 架构处理器。SAMSUNG Exynos 2100是一款高端 Soc，在三个集群中具有 8 个内核和集成的 Arm Mali-G78Mp14 Gpu。SAMSUNG Exynos 1080是一款用于移动设备的处理器。 Samsung多款产品存在安全漏洞，该漏洞源于全局变量同步不当导致双重释放，攻击者可通过从多个线程并发调用ioctl
Possible ATT&CK Techniques 2 AI
T1068 · Exploitation for Privilege Escalation T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-54601
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a double free. An attacker can trigger a race condition by invoking an ioctl function concurrently from multiple threads.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Samsung多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SAMSUNG Exynos 980等都是韩国三星（SAMSUNG）公司的产品。SAMSUNG Exynos 980是一款首个 5G 集成 Soc 产品，也是全球首款 A77 架构处理器。SAMSUNG Exynos 2100是一款高端 Soc，在三个集群中具有 8 个内核和集成的 Arm Mali-G78Mp14 Gpu。SAMSUNG Exynos 1080是一款用于移动设备的处理器。 Samsung多款产品存在安全漏洞，该漏洞源于全局变量同步不当导致双重释放，攻击者可通过从多个线程并发调用ioctl
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2025-54601
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-54601
请登录查看更多情报信息。
Same Patch Batch · n/a · 2026-04-06 · 33 CVEs total
| CVE-2026-5616 | 7.3 HIGH | JeecgBoot AI Chat JeecgBizToolsProvider.java missing authentication |
| CVE-2026-5661 | 5.3 MEDIUM | Free5GC NGSetupRequest denial of service |
| CVE-2026-5624 | 4.3 MEDIUM | ProjectSend upload.php cross-site request forgery |
| CVE-2026-31353 | FeehiCMS 安全漏洞 | |
| CVE-2025-57834 | Samsung多款产品 安全漏洞 | |
| CVE-2025-57835 | SAMSUNG多款产品 安全漏洞 | |
| CVE-2025-59440 | SAMSUNG多款产品 安全漏洞 | |
| CVE-2025-54324 | Samsung多款产品 安全漏洞 | |
| CVE-2025-54328 | Samsung多款产品 安全漏洞 | |
| CVE-2025-54602 | Samsung多款产品 安全漏洞 | |
| CVE-2025-58349 | Samsung多款产品 安全漏洞 | |
| CVE-2026-30613 | AZIOT 1 Node Smart Switch 安全漏洞 | |
| CVE-2025-61166 | Ascertia SigningHub 安全漏洞 | |
| CVE-2026-31313 | FeehiCMS 安全漏洞 | |
| CVE-2026-31350 | FeehiCMS 安全漏洞 | |
| CVE-2026-31354 | FeehiCMS 安全漏洞 | |
| CVE-2026-31153 | Bynder 安全漏洞 | |
| CVE-2026-31352 | FeehiCMS 安全漏洞 | |
| CVE-2026-31351 | FeehiCMS 安全漏洞 | |
| CVE-2026-31063 | UTT HiPER 1200GW 安全漏洞 |
Showing top 20 of 33 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2025-54601
No comments yet