Samsung Semiconductor

35 CVEs in 21 Samsung Semiconductor products, including Exynos 2400, Exynos 1480, Exynos 2500. Newest: CVE-2026-69068 (2026-11-05).

Samsung Semiconductor products with known CVEs

ProductCVEs
Exynos 240024
Exynos 148022
Exynos 250021
Exynos 158020
Exynos Modem 530017
Exynos 168016
Exynos Modem 540016
Exynos 220015
Exynos 128014
Exynos 138014
Exynos Modem 512314
Exynos 133012
Exynos 911010
Exynos Modem 541010
Exynos 10809
Exynos 26009
Exynos 21008
Exynos W10008
Exynos W9207
Exynos W9307
Exynos 8506
Samsung Semiconductor CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-690682026-11-05Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.
CVE-2026-690662026-11-05Memory corruption in GPU driver due to improper validation of VMID reservation.
CVE-2026-690502026-11-05Out-of-bounds memory access in a device driver due to improper resource state tracking.
CVE-2026-690442026-11-05In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.
CVE-2026-690432026-11-05In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption
CVE-2026-690252026-11-05In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service
CVE-2026-690062026-11-05Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.
CVE-2026-690052026-11-05Integer overflow in NPU driver parameter processing due to insufficient bounds checking.
CVE-2026-690022026-11-05Incorrect authorization in Samsung framework services due to missing permission checks
CVE-2026-689942026-11-05A double free vulnerability in NPU driver due to improper pointer management (941)
CVE-2026-689932026-11-05A double free vulnerability in NPU driver due to improper pointer management (940)
CVE-2026-689912026-11-05In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service c…
CVE-2026-689902026-11-05In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of servic…
CVE-2026-689852026-11-05In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.
CVE-2026-689842026-11-05In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.
CVE-2026-481862026-11-05Improper handling of messages before AS security activation can cause unexpected behavior
CVE-2026-481832026-11-05Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions
CVE-2026-481792026-11-05In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service
CVE-2026-481782026-11-05Out of bound access in PPC due to race condition in global variable access
CVE-2026-481762026-11-05A memory corruption vulnerability caused by improper validation of messages
CVE-2026-48175Medium5.52026-11-05Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.
CVE-2026-481742026-11-05In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
CVE-2026-481732026-11-05In the NAS message handler, improper validation of the length field in NAS message causes memory corruption
CVE-2026-354952026-11-05In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability
CVE-2026-354942026-11-05In the baseband, memory corruption during NAS packet processing can cause a denial of service.
CVE-2026-339722026-11-05In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.
CVE-2026-339712026-11-05In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
CVE-2026-339692026-11-05In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.
CVE-2026-339652026-11-05An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.
CVE-2026-339582026-11-05Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.
CVE-2025-663682026-11-05Incorrect handling of SDP payload leads to a Denial of Service
CVE-2025-663672026-11-05Improper handling of NAS DLTransport messages may lead to a baseband crash.
CVE-2025-663662026-11-05Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash
CVE-2025-663652026-11-05Incorrect handling of SIP packets leads to baseband crashes
CVE-2025-663642026-11-05Continuously sending control‑plane messages causes the baseband to crashes.