Samsung Exynos Processors Out-of-Bounds Read Vulnerability in NPU Driver

A medium-severity out-of-bounds read vulnerability has been identified in the NPU driver of Samsung Mobile Processor Exynos, affecting versions through July 2025. The issue arises in the '__is_done_for_me' function, where 'q->bufs[]' is accessed without proper bounds checking.

Impact

Exploitation of this vulnerability leads to an out-of-bounds read, which can potentially be used to read sensitive information or cause a denial-of-service condition.