[ Vendor · 35 CVEs ]
Samsung Semiconductor
CVEs affecting Samsung Semiconductor published in the last 30 days, plus any Samsung Semiconductor CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-69005 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1480Integer overflow in NPU driver parameter processing due to insufficient bounds checking. | |
| CVE-2026-69006 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 850Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption. | |
| CVE-2026-69025 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1480In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service | |
| CVE-2026-69043 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 2200In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption | |
| CVE-2026-69044 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1580In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption. | |
| CVE-2026-69050 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1480Out-of-bounds memory access in a device driver due to improper resource state tracking. | |
| CVE-2026-69066 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 2200Memory corruption in GPU driver due to improper validation of VMID reservation. | |
| CVE-2026-69068 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos Modem 5300Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory. | |
| CVE-2026-68984 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 2100In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption. | |
| CVE-2026-68985 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1280In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of… | |
| CVE-2026-68990 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1480In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial… | |
| CVE-2026-68991 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1480In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of… | |
| CVE-2026-68993 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1480A double free vulnerability in NPU driver due to improper pointer management (940) | |
| CVE-2026-68994 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1480A double free vulnerability in NPU driver due to improper pointer management (941) | |
| CVE-2026-69002 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1580Incorrect authorization in Samsung framework services due to missing permission checks | |
| CVE-2026-48178 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 2200Out of bound access in PPC due to race condition in global variable access | |
| CVE-2026-48179 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1080In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service | |
| CVE-2026-48183 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1480Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions | |
| CVE-2026-48186 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1280Improper handling of messages before AS security activation can cause unexpected behavior | |
| CVE-2026-35495 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1080In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability | |
| CVE-2026-48173 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 850In the NAS message handler, improper validation of the length field in NAS message causes memory corruption | |
| CVE-2026-48174 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1280In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition. | |
| CVE-2026-48175 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1280Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition. | |
| CVE-2026-48176 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1080A memory corruption vulnerability caused by improper validation of messages | |
| CVE-2026-33958 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1080Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition. | |
| CVE-2026-33965 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1080An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow. | |
| CVE-2026-33969 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 850In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service. | |
| CVE-2026-33971 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 850In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition. | |
| CVE-2026-33972 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1080In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation. | |
| CVE-2026-35494 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1280In the baseband, memory corruption during NAS packet processing can cause a denial of service. | |
| CVE-2025-66368 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1080Incorrect handling of SDP payload leads to a Denial of Service | |
| CVE-2025-66365 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1080Incorrect handling of SIP packets leads to baseband crashes | |
| CVE-2025-66366 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 1280Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash | |
| CVE-2025-66367 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 850Improper handling of NAS DLTransport messages may lead to a baseband crash. | |
| CVE-2025-66364 | 5 Nov 2026 | Not scored yet | Samsung Semiconductor Exynos 850Continuously sending control‑plane messages causes the baseband to crashes. |