Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2023-10-09. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 2 products
Post updated by adding a new idea (technique) at the end, resulting in a fast and effective exploitation :) https://soez.github.io/posts/CVE-2022-22265-Samsung-npu-driver/ PD. This idea occurred to me on 30/12/2025, but that’s not important. https://t.co/W8hypXBoLt
Post summary
A blog post outlines a new technique achieving fast and effective exploitation of CVE-2022-22265, with a proof‑of‑concept linked in the shared URL.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | android | 10.0 | - | - | |
| OS | android | 11.0 | - | - | |
| OS | android | 12.0 | - | - | |
| OS | android | 9.0 | - | - | |
| HW | samsung | exynos | - | - | - |