Samsung Semiconductor Exynos 2500
21 CVEs affecting Samsung Semiconductor Exynos 2500. Latest disclosed: 2026-11-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-48175 | Medium | 5.5 | 2026-11-05 | Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition. |
CVE-2026-69066 | | 2026-11-05 | Memory corruption in GPU driver due to improper validation of VMID reservation. | |
CVE-2026-69050 | | 2026-11-05 | Out-of-bounds memory access in a device driver due to improper resource state tracking. | |
CVE-2026-69044 | | 2026-11-05 | In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption. | |
CVE-2026-69043 | | 2026-11-05 | In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption | |
CVE-2026-69006 | | 2026-11-05 | Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption. | |
CVE-2026-69005 | | 2026-11-05 | Integer overflow in NPU driver parameter processing due to insufficient bounds checking. | |
CVE-2026-69002 | | 2026-11-05 | Incorrect authorization in Samsung framework services due to missing permission checks | |
CVE-2026-68994 | | 2026-11-05 | A double free vulnerability in NPU driver due to improper pointer management (941) | |
CVE-2026-68990 | | 2026-11-05 | In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of servic… | |
CVE-2026-68984 | | 2026-11-05 | In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption. | |
CVE-2026-48186 | | 2026-11-05 | Improper handling of messages before AS security activation can cause unexpected behavior | |
CVE-2026-48183 | | 2026-11-05 | Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions | |
CVE-2026-48178 | | 2026-11-05 | Out of bound access in PPC due to race condition in global variable access | |
CVE-2026-48173 | | 2026-11-05 | In the NAS message handler, improper validation of the length field in NAS message causes memory corruption | |
CVE-2026-33971 | | 2026-11-05 | In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition. | |
CVE-2026-33969 | | 2026-11-05 | In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service. | |
CVE-2026-33958 | | 2026-11-05 | Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition. | |
CVE-2025-66367 | | 2026-11-05 | Improper handling of NAS DLTransport messages may lead to a baseband crash. | |
CVE-2025-66366 | | 2026-11-05 | Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash |