Search
Find a vulnerability
Search criteria
35 vulnerabilities
CVE-2026-48173 (GCVE-0-2026-48173)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:43 – Updated: 2026-11-05 02:43
VLAI
EPSS
VEX
Summary
In the NAS message handler, improper validation of the length field in NAS message causes memory corruption
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
19 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 850 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2100 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 9110 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos W920 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos W930 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos W1000 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5410 |
Affected:
0 , < September 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 850",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2100",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 9110",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W920",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W930",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W1000",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5410",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the NAS message handler, improper validation of the length field in NAS message causes memory corruption\u003c/span\u003e"
}
],
"value": "In the NAS message handler, improper validation of the length field in NAS message causes memory corruption"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:43:32.426Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-48173",
"datePublished": "2026-11-05T02:43:32.426Z",
"dateReserved": "2026-05-21T04:23:11.790Z",
"dateUpdated": "2026-11-05T02:43:32.426Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-48174 (GCVE-0-2026-48174)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:43 – Updated: 2026-11-05 02:43
VLAI
EPSS
VEX
Summary
In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
9 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos W1000 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < September 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W1000",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial\u2011of\u2011service condition.\u003c/span\u003e"
}
],
"value": "In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial\u2011of\u2011service condition."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "CWE-476",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:43:24.241Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-48174",
"datePublished": "2026-11-05T02:43:24.241Z",
"dateReserved": "2026-05-21T04:23:11.791Z",
"dateUpdated": "2026-11-05T02:43:24.241Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-35494 (GCVE-0-2026-35494)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:43 – Updated: 2026-11-05 02:43
VLAI
EPSS
VEX
Summary
In the baseband, memory corruption during NAS packet processing can cause a denial of service.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
9 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W920 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W930 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W920",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W930",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the baseband, memory corruption during NAS packet processing can cause a denial of service.\u003c/span\u003e"
}
],
"value": "In the baseband, memory corruption during NAS packet processing can cause a denial of service."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:43:17.036Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-35494",
"datePublished": "2026-11-05T02:43:17.036Z",
"dateReserved": "2026-04-02T20:57:09.187Z",
"dateUpdated": "2026-11-05T02:43:17.036Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-48175 (GCVE-0-2026-48175)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:43 – Updated: 2026-11-05 02:43
VLAI
EPSS
VEX
Summary
Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
11 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5410 |
Affected:
0 , < September 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5410",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eProcessing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.\u003c/span\u003e"
}
],
"value": "Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1285",
"description": "CWE-1285",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:43:09.443Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-48175",
"datePublished": "2026-11-05T02:43:09.443Z",
"dateReserved": "2026-05-21T04:23:11.791Z",
"dateUpdated": "2026-11-05T02:43:09.443Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-48178 (GCVE-0-2026-48178)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:43 – Updated: 2026-11-05 02:43
VLAI
EPSS
VEX
Summary
Out of bound access in PPC due to race condition in global variable access
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eOut of bound access in PPC due to race condition in global variable access\u003c/span\u003e"
}
],
"value": "Out of bound access in PPC due to race condition in global variable access"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-413",
"description": "CWE-413",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:43:02.080Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-48178",
"datePublished": "2026-11-05T02:43:02.080Z",
"dateReserved": "2026-05-21T04:23:11.791Z",
"dateUpdated": "2026-11-05T02:43:02.080Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-48186 (GCVE-0-2026-48186)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:42 – Updated: 2026-11-05 02:42
VLAI
EPSS
VEX
Summary
Improper handling of messages before AS security activation can cause unexpected behavior
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
13 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W1000 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5410 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W1000",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5410",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eImproper handling of messages before AS security activation can cause unexpected behavior\u003c/span\u003e"
}
],
"value": "Improper handling of messages before AS security activation can cause unexpected behavior"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-754",
"description": "CWE-754",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:42:54.601Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-48186",
"datePublished": "2026-11-05T02:42:54.601Z",
"dateReserved": "2026-05-21T04:23:11.792Z",
"dateUpdated": "2026-11-05T02:42:54.601Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-68993 (GCVE-0-2026-68993)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:42 – Updated: 2026-11-05 02:42
VLAI
EPSS
VEX
Summary
A double free vulnerability in NPU driver due to improper pointer management (940)
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA double free vulnerability in NPU driver due to improper pointer management (940)\u003c/span\u003e"
}
],
"value": "A double free vulnerability in NPU driver due to improper pointer management (940)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-415",
"description": "CWE-415",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:42:47.095Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-68993",
"datePublished": "2026-11-05T02:42:47.095Z",
"dateReserved": "2026-08-03T06:35:58.536Z",
"dateUpdated": "2026-11-05T02:42:47.095Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-68994 (GCVE-0-2026-68994)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:42 – Updated: 2026-11-05 02:42
VLAI
EPSS
VEX
Summary
A double free vulnerability in NPU driver due to improper pointer management (941)
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA double free vulnerability in NPU driver due to improper pointer management (941)\u003c/span\u003e"
}
],
"value": "A double free vulnerability in NPU driver due to improper pointer management (941)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-415",
"description": "CWE-415",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:42:38.965Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-68994",
"datePublished": "2026-11-05T02:42:38.965Z",
"dateReserved": "2026-08-03T06:35:58.536Z",
"dateUpdated": "2026-11-05T02:42:38.965Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-48183 (GCVE-0-2026-48183)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:42 – Updated: 2026-11-05 02:42
VLAI
EPSS
VEX
Summary
Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eImproper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions\u003c/span\u003e"
}
],
"value": "Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-281",
"description": "CWE-281",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:42:31.284Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-48183",
"datePublished": "2026-11-05T02:42:31.284Z",
"dateReserved": "2026-05-21T04:23:11.791Z",
"dateUpdated": "2026-11-05T02:42:31.284Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-68984 (GCVE-0-2026-68984)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:41 – Updated: 2026-11-05 02:41
VLAI
EPSS
VEX
Summary
In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
10 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 2100 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 2100",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.\u003c/span\u003e"
}
],
"value": "In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "CWE-190",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:41:23.587Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-68984",
"datePublished": "2026-11-05T02:41:23.587Z",
"dateReserved": "2026-08-03T06:35:58.535Z",
"dateUpdated": "2026-11-05T02:41:23.587Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69005 (GCVE-0-2026-69005)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:41 – Updated: 2026-11-05 02:41
VLAI
EPSS
VEX
Summary
Integer overflow in NPU driver parameter processing due to insufficient bounds checking.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eInteger overflow in NPU driver parameter processing due to insufficient bounds checking.\u003c/span\u003e"
}
],
"value": "Integer overflow in NPU driver parameter processing due to insufficient bounds checking."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "CWE-190",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:41:16.154Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69005",
"datePublished": "2026-11-05T02:41:16.154Z",
"dateReserved": "2026-08-03T06:35:58.537Z",
"dateUpdated": "2026-11-05T02:41:16.154Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-68985 (GCVE-0-2026-68985)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:41 – Updated: 2026-11-05 02:41
VLAI
EPSS
VEX
Summary
In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.\u003c/span\u003e"
}
],
"value": "In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:41:07.681Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-68985",
"datePublished": "2026-11-05T02:41:07.681Z",
"dateReserved": "2026-08-03T06:35:58.535Z",
"dateUpdated": "2026-11-05T02:41:07.681Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69006 (GCVE-0-2026-69006)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:41 – Updated: 2026-11-05 02:41
VLAI
EPSS
VEX
Summary
Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
15 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 850 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2100 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos W920 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos W930 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos W1000 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5410 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 850",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2100",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W920",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W930",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W1000",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5410",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eInsufficient validation of length fields in the GNSS firmware loader can result in kernel\u2011memory corruption.\u003c/span\u003e"
}
],
"value": "Insufficient validation of length fields in the GNSS firmware loader can result in kernel\u2011memory corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-754",
"description": "CWE-754",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:41:00.380Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69006",
"datePublished": "2026-11-05T02:41:00.380Z",
"dateReserved": "2026-08-03T06:35:58.537Z",
"dateUpdated": "2026-11-05T02:41:00.380Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69068 (GCVE-0-2026-69068)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:40 – Updated: 2026-11-05 02:40
VLAI
EPSS
VEX
Summary
Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eInsufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory. \u003c/span\u003e"
}
],
"value": "Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:40:53.098Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69068",
"datePublished": "2026-11-05T02:40:53.098Z",
"dateReserved": "2026-08-03T06:35:58.543Z",
"dateUpdated": "2026-11-05T02:40:53.098Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69025 (GCVE-0-2026-69025)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:40 – Updated: 2026-11-05 02:40
VLAI
EPSS
VEX
Summary
In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service\u003c/span\u003e"
}
],
"value": "In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "CWE-476",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:40:45.514Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69025",
"datePublished": "2026-11-05T02:40:45.514Z",
"dateReserved": "2026-08-03T06:35:58.539Z",
"dateUpdated": "2026-11-05T02:40:45.514Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-68990 (GCVE-0-2026-68990)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:40 – Updated: 2026-11-05 02:40
VLAI
EPSS
VEX
Summary
In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation.\u003c/span\u003e"
}
],
"value": "In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-681",
"description": "CWE-681",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:40:38.225Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-68990",
"datePublished": "2026-11-05T02:40:38.225Z",
"dateReserved": "2026-08-03T06:35:58.536Z",
"dateUpdated": "2026-11-05T02:40:38.225Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-68991 (GCVE-0-2026-68991)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:40 – Updated: 2026-11-05 02:40
VLAI
EPSS
VEX
Summary
In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.\u003c/span\u003e"
}
],
"value": "In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:40:30.369Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-68991",
"datePublished": "2026-11-05T02:40:30.369Z",
"dateReserved": "2026-08-03T06:35:58.536Z",
"dateUpdated": "2026-11-05T02:40:30.369Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69002 (GCVE-0-2026-69002)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:40 – Updated: 2026-11-05 02:40
VLAI
EPSS
VEX
Summary
Incorrect authorization in Samsung framework services due to missing permission checks
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIncorrect authorization in Samsung framework services due to missing permission checks \u003c/span\u003e"
}
],
"value": "Incorrect authorization in Samsung framework services due to missing permission checks"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:40:22.856Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69002",
"datePublished": "2026-11-05T02:40:22.856Z",
"dateReserved": "2026-08-03T06:35:58.537Z",
"dateUpdated": "2026-11-05T02:40:22.856Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69066 (GCVE-0-2026-69066)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:40 – Updated: 2026-11-05 02:40
VLAI
EPSS
VEX
Summary
Memory corruption in GPU driver due to improper validation of VMID reservation.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eMemory corruption in GPU driver due to improper validation of VMID reservation.\u003c/span\u003e"
}
],
"value": "Memory corruption in GPU driver due to improper validation of VMID reservation."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-754",
"description": "CWE-754",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:40:15.438Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69066",
"datePublished": "2026-11-05T02:40:15.438Z",
"dateReserved": "2026-08-03T06:35:58.543Z",
"dateUpdated": "2026-11-05T02:40:15.438Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69050 (GCVE-0-2026-69050)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:40 – Updated: 2026-11-05 02:40
VLAI
EPSS
VEX
Summary
Out-of-bounds memory access in a device driver due to improper resource state tracking.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eOut-of-bounds memory access in a device driver due to improper resource state tracking.\u003c/span\u003e"
}
],
"value": "Out-of-bounds memory access in a device driver due to improper resource state tracking."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:40:08.162Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69050",
"datePublished": "2026-11-05T02:40:08.162Z",
"dateReserved": "2026-08-03T06:35:58.541Z",
"dateUpdated": "2026-11-05T02:40:08.162Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69043 (GCVE-0-2026-69043)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:39 – Updated: 2026-11-05 02:39
VLAI
EPSS
VEX
Summary
In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
7 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption\u003c/span\u003e"
}
],
"value": "In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:39:59.788Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69043",
"datePublished": "2026-11-05T02:39:59.788Z",
"dateReserved": "2026-08-03T06:35:58.540Z",
"dateUpdated": "2026-11-05T02:39:59.788Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69044 (GCVE-0-2026-69044)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:39 – Updated: 2026-11-05 02:39
VLAI
EPSS
VEX
Summary
In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.\u003c/span\u003e"
}
],
"value": "In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:39:51.603Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69044",
"datePublished": "2026-11-05T02:39:51.603Z",
"dateReserved": "2026-08-03T06:35:58.540Z",
"dateUpdated": "2026-11-05T02:39:51.603Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-66366 (GCVE-0-2025-66366)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:38 – Updated: 2026-11-05 02:38
VLAI
EPSS
VEX
Summary
Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
10 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5410 |
Affected:
0 , < July 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5410",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIncorrect handling of unauthenticated downlink RRC\u202fSetup messages can cause the baseband to crash\u003c/span\u003e"
}
],
"value": "Incorrect handling of unauthenticated downlink RRC\u202fSetup messages can cause the baseband to crash"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-129",
"description": "CWE-129",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:38:04.503Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2025-66366",
"datePublished": "2026-11-05T02:38:04.503Z",
"dateReserved": "2025-11-28T00:15:21.913Z",
"dateUpdated": "2026-11-05T02:38:04.503Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-33965 (GCVE-0-2026-33965)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:37 – Updated: 2026-11-05 02:37
VLAI
EPSS
VEX
Summary
An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1080 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 9110 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1080",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 9110",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eAn attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.\u003c/span\u003e"
}
],
"value": "An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"description": "CWE-295",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:37:56.040Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-33965",
"datePublished": "2026-11-05T02:37:56.040Z",
"dateReserved": "2026-03-24T19:59:13.806Z",
"dateUpdated": "2026-11-05T02:37:56.040Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-66367 (GCVE-0-2025-66367)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:37 – Updated: 2026-11-05 02:37
VLAI
EPSS
VEX
Summary
Improper handling of NAS DLTransport messages may lead to a baseband crash.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
18 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 850 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2100 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos W920 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos W930 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos W1000 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < July 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5410 |
Affected:
0 , < July 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 850",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2100",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W920",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W930",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W1000",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5410",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "July 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eImproper handling of NAS DLTransport messages may lead to a baseband crash.\u003c/span\u003e"
}
],
"value": "Improper handling of NAS DLTransport messages may lead to a baseband crash."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:37:48.440Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2025-66367",
"datePublished": "2026-11-05T02:37:48.440Z",
"dateReserved": "2025-11-28T00:15:21.913Z",
"dateUpdated": "2026-11-05T02:37:48.440Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-66368 (GCVE-0-2025-66368)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:37 – Updated: 2026-11-05 02:37
VLAI
EPSS
VEX
Summary
Incorrect handling of SDP payload leads to a Denial of Service
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1080 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 9110 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1080",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 9110",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIncorrect handling of SDP payload leads to a Denial of Service\u003c/span\u003e"
}
],
"value": "Incorrect handling of SDP payload leads to a Denial of Service"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-754",
"description": "CWE-754",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:37:40.636Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2025-66368",
"datePublished": "2026-11-05T02:37:40.636Z",
"dateReserved": "2025-11-28T00:15:21.914Z",
"dateUpdated": "2026-11-05T02:37:40.636Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-33958 (GCVE-0-2026-33958)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:37 – Updated: 2026-11-05 02:37
VLAI
EPSS
VEX
Summary
Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
15 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1080 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2100 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5410 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1080",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2100",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5410",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eProcessing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.\u003c/span\u003e"
}
],
"value": "Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1286",
"description": "CWE-1286",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:37:33.731Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-33958",
"datePublished": "2026-11-05T02:37:33.731Z",
"dateReserved": "2026-03-24T19:59:13.806Z",
"dateUpdated": "2026-11-05T02:37:33.731Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-33971 (GCVE-0-2026-33971)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:37 – Updated: 2026-11-05 02:37
VLAI
EPSS
VEX
Summary
In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
15 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 850 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2100 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W920 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W930 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W1000 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5410 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 850",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2100",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W920",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W930",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W1000",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5410",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial\u2011of\u2011service condition.\u003c/span\u003e"
}
],
"value": "In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial\u2011of\u2011service condition."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "CWE-400",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:37:26.712Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-33971",
"datePublished": "2026-11-05T02:37:26.712Z",
"dateReserved": "2026-03-24T19:59:13.807Z",
"dateUpdated": "2026-11-05T02:37:26.712Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-33969 (GCVE-0-2026-33969)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:37 – Updated: 2026-11-05 02:37
VLAI
EPSS
VEX
Summary
In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
19 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 850 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2100 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 9110 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W920 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W930 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W1000 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5410 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 850",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2100",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 9110",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W920",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W930",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W1000",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5410",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.\u003c/span\u003e"
}
],
"value": "In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-835",
"description": "CWE-835",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:37:19.656Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-33969",
"datePublished": "2026-11-05T02:37:19.656Z",
"dateReserved": "2026-03-24T19:59:13.807Z",
"dateUpdated": "2026-11-05T02:37:19.656Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-33972 (GCVE-0-2026-33972)
Vulnerability from cvelistv5 – Published: 2026-11-05 02:37 – Updated: 2026-11-05 02:37
VLAI
EPSS
VEX
Summary
In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1080 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 9110 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1080",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 9110",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the Exynos modem\u0027s IMS stack, Out of Bound access occurs due to improper validation.\u003c/span\u003e"
}
],
"value": "In the Exynos modem\u0027s IMS stack, Out of Bound access occurs due to improper validation."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1284",
"description": "CWE-1284",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:37:12.598Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-33972",
"datePublished": "2026-11-05T02:37:12.598Z",
"dateReserved": "2026-03-24T19:59:13.807Z",
"dateUpdated": "2026-11-05T02:37:12.598Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}