Search
Find a vulnerability
Search criteria
73 vulnerabilities by Samsung Semiconductor
CVE-2026-69068 (GCVE-0-2026-69068)
Vulnerability from nvd – Published: 2026-11-05 02:40 – Updated: 2026-11-05 02:40
VLAI
EPSS
VEX
Summary
Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eInsufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory. \u003c/span\u003e"
}
],
"value": "Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:40:53.098Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69068",
"datePublished": "2026-11-05T02:40:53.098Z",
"dateReserved": "2026-08-03T06:35:58.543Z",
"dateUpdated": "2026-11-05T02:40:53.098Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69066 (GCVE-0-2026-69066)
Vulnerability from nvd – Published: 2026-11-05 02:40 – Updated: 2026-11-05 02:40
VLAI
EPSS
VEX
Summary
Memory corruption in GPU driver due to improper validation of VMID reservation.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eMemory corruption in GPU driver due to improper validation of VMID reservation.\u003c/span\u003e"
}
],
"value": "Memory corruption in GPU driver due to improper validation of VMID reservation."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-754",
"description": "CWE-754",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:40:15.438Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69066",
"datePublished": "2026-11-05T02:40:15.438Z",
"dateReserved": "2026-08-03T06:35:58.543Z",
"dateUpdated": "2026-11-05T02:40:15.438Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69050 (GCVE-0-2026-69050)
Vulnerability from nvd – Published: 2026-11-05 02:40 – Updated: 2026-11-05 02:40
VLAI
EPSS
VEX
Summary
Out-of-bounds memory access in a device driver due to improper resource state tracking.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eOut-of-bounds memory access in a device driver due to improper resource state tracking.\u003c/span\u003e"
}
],
"value": "Out-of-bounds memory access in a device driver due to improper resource state tracking."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:40:08.162Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69050",
"datePublished": "2026-11-05T02:40:08.162Z",
"dateReserved": "2026-08-03T06:35:58.541Z",
"dateUpdated": "2026-11-05T02:40:08.162Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69044 (GCVE-0-2026-69044)
Vulnerability from nvd – Published: 2026-11-05 02:39 – Updated: 2026-11-05 02:39
VLAI
EPSS
VEX
Summary
In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.\u003c/span\u003e"
}
],
"value": "In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:39:51.603Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69044",
"datePublished": "2026-11-05T02:39:51.603Z",
"dateReserved": "2026-08-03T06:35:58.540Z",
"dateUpdated": "2026-11-05T02:39:51.603Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69043 (GCVE-0-2026-69043)
Vulnerability from nvd – Published: 2026-11-05 02:39 – Updated: 2026-11-05 02:39
VLAI
EPSS
VEX
Summary
In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
7 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption\u003c/span\u003e"
}
],
"value": "In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:39:59.788Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69043",
"datePublished": "2026-11-05T02:39:59.788Z",
"dateReserved": "2026-08-03T06:35:58.540Z",
"dateUpdated": "2026-11-05T02:39:59.788Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69025 (GCVE-0-2026-69025)
Vulnerability from nvd – Published: 2026-11-05 02:40 – Updated: 2026-11-05 02:40
VLAI
EPSS
VEX
Summary
In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service\u003c/span\u003e"
}
],
"value": "In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "CWE-476",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:40:45.514Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69025",
"datePublished": "2026-11-05T02:40:45.514Z",
"dateReserved": "2026-08-03T06:35:58.539Z",
"dateUpdated": "2026-11-05T02:40:45.514Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69006 (GCVE-0-2026-69006)
Vulnerability from nvd – Published: 2026-11-05 02:41 – Updated: 2026-11-05 02:41
VLAI
EPSS
VEX
Summary
Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
15 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 850 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2100 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos W920 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos W930 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos W1000 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5410 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 850",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2100",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W920",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W930",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W1000",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5410",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eInsufficient validation of length fields in the GNSS firmware loader can result in kernel\u2011memory corruption.\u003c/span\u003e"
}
],
"value": "Insufficient validation of length fields in the GNSS firmware loader can result in kernel\u2011memory corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-754",
"description": "CWE-754",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:41:00.380Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69006",
"datePublished": "2026-11-05T02:41:00.380Z",
"dateReserved": "2026-08-03T06:35:58.537Z",
"dateUpdated": "2026-11-05T02:41:00.380Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69005 (GCVE-0-2026-69005)
Vulnerability from nvd – Published: 2026-11-05 02:41 – Updated: 2026-11-05 02:41
VLAI
EPSS
VEX
Summary
Integer overflow in NPU driver parameter processing due to insufficient bounds checking.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eInteger overflow in NPU driver parameter processing due to insufficient bounds checking.\u003c/span\u003e"
}
],
"value": "Integer overflow in NPU driver parameter processing due to insufficient bounds checking."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "CWE-190",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:41:16.154Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69005",
"datePublished": "2026-11-05T02:41:16.154Z",
"dateReserved": "2026-08-03T06:35:58.537Z",
"dateUpdated": "2026-11-05T02:41:16.154Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69002 (GCVE-0-2026-69002)
Vulnerability from nvd – Published: 2026-11-05 02:40 – Updated: 2026-11-05 02:40
VLAI
EPSS
VEX
Summary
Incorrect authorization in Samsung framework services due to missing permission checks
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIncorrect authorization in Samsung framework services due to missing permission checks \u003c/span\u003e"
}
],
"value": "Incorrect authorization in Samsung framework services due to missing permission checks"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:40:22.856Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-69002",
"datePublished": "2026-11-05T02:40:22.856Z",
"dateReserved": "2026-08-03T06:35:58.537Z",
"dateUpdated": "2026-11-05T02:40:22.856Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-68994 (GCVE-0-2026-68994)
Vulnerability from nvd – Published: 2026-11-05 02:42 – Updated: 2026-11-05 02:42
VLAI
EPSS
VEX
Summary
A double free vulnerability in NPU driver due to improper pointer management (941)
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA double free vulnerability in NPU driver due to improper pointer management (941)\u003c/span\u003e"
}
],
"value": "A double free vulnerability in NPU driver due to improper pointer management (941)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-415",
"description": "CWE-415",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:42:38.965Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-68994",
"datePublished": "2026-11-05T02:42:38.965Z",
"dateReserved": "2026-08-03T06:35:58.536Z",
"dateUpdated": "2026-11-05T02:42:38.965Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-68993 (GCVE-0-2026-68993)
Vulnerability from nvd – Published: 2026-11-05 02:42 – Updated: 2026-11-05 02:42
VLAI
EPSS
VEX
Summary
A double free vulnerability in NPU driver due to improper pointer management (940)
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA double free vulnerability in NPU driver due to improper pointer management (940)\u003c/span\u003e"
}
],
"value": "A double free vulnerability in NPU driver due to improper pointer management (940)"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-415",
"description": "CWE-415",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:42:47.095Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-68993",
"datePublished": "2026-11-05T02:42:47.095Z",
"dateReserved": "2026-08-03T06:35:58.536Z",
"dateUpdated": "2026-11-05T02:42:47.095Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-68991 (GCVE-0-2026-68991)
Vulnerability from nvd – Published: 2026-11-05 02:40 – Updated: 2026-11-05 02:40
VLAI
EPSS
VEX
Summary
In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.\u003c/span\u003e"
}
],
"value": "In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:40:30.369Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-68991",
"datePublished": "2026-11-05T02:40:30.369Z",
"dateReserved": "2026-08-03T06:35:58.536Z",
"dateUpdated": "2026-11-05T02:40:30.369Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-68990 (GCVE-0-2026-68990)
Vulnerability from nvd – Published: 2026-11-05 02:40 – Updated: 2026-11-05 02:40
VLAI
EPSS
VEX
Summary
In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation.\u003c/span\u003e"
}
],
"value": "In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-681",
"description": "CWE-681",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:40:38.225Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-68990",
"datePublished": "2026-11-05T02:40:38.225Z",
"dateReserved": "2026-08-03T06:35:58.536Z",
"dateUpdated": "2026-11-05T02:40:38.225Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-68985 (GCVE-0-2026-68985)
Vulnerability from nvd – Published: 2026-11-05 02:41 – Updated: 2026-11-05 02:41
VLAI
EPSS
VEX
Summary
In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.\u003c/span\u003e"
}
],
"value": "In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:41:07.681Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-68985",
"datePublished": "2026-11-05T02:41:07.681Z",
"dateReserved": "2026-08-03T06:35:58.535Z",
"dateUpdated": "2026-11-05T02:41:07.681Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-68984 (GCVE-0-2026-68984)
Vulnerability from nvd – Published: 2026-11-05 02:41 – Updated: 2026-11-05 02:41
VLAI
EPSS
VEX
Summary
In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
10 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 2100 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < November 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < November 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 2100",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "November 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.\u003c/span\u003e"
}
],
"value": "In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "CWE-190",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:41:23.587Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-68984",
"datePublished": "2026-11-05T02:41:23.587Z",
"dateReserved": "2026-08-03T06:35:58.535Z",
"dateUpdated": "2026-11-05T02:41:23.587Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-48186 (GCVE-0-2026-48186)
Vulnerability from nvd – Published: 2026-11-05 02:42 – Updated: 2026-11-05 02:42
VLAI
EPSS
VEX
Summary
Improper handling of messages before AS security activation can cause unexpected behavior
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
13 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W1000 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5410 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W1000",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5410",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eImproper handling of messages before AS security activation can cause unexpected behavior\u003c/span\u003e"
}
],
"value": "Improper handling of messages before AS security activation can cause unexpected behavior"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-754",
"description": "CWE-754",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:42:54.601Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-48186",
"datePublished": "2026-11-05T02:42:54.601Z",
"dateReserved": "2026-05-21T04:23:11.792Z",
"dateUpdated": "2026-11-05T02:42:54.601Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-48183 (GCVE-0-2026-48183)
Vulnerability from nvd – Published: 2026-11-05 02:42 – Updated: 2026-11-05 02:42
VLAI
EPSS
VEX
Summary
Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eImproper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions\u003c/span\u003e"
}
],
"value": "Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-281",
"description": "CWE-281",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:42:31.284Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-48183",
"datePublished": "2026-11-05T02:42:31.284Z",
"dateReserved": "2026-05-21T04:23:11.791Z",
"dateUpdated": "2026-11-05T02:42:31.284Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-48179 (GCVE-0-2026-48179)
Vulnerability from nvd – Published: 2026-11-05 02:37 – Updated: 2026-11-05 02:37
VLAI
EPSS
VEX
Summary
In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1080 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 9110 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < September 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1080",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 9110",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the Exynos modem\u0027s IMS stack, improper handling of SDP payload leads to a Denial of Service\u003c/span\u003e"
}
],
"value": "In the Exynos modem\u0027s IMS stack, improper handling of SDP payload leads to a Denial of Service"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1286",
"description": "CWE-1286",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:37:05.677Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-48179",
"datePublished": "2026-11-05T02:37:05.677Z",
"dateReserved": "2026-05-21T04:23:11.791Z",
"dateUpdated": "2026-11-05T02:37:05.677Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-48178 (GCVE-0-2026-48178)
Vulnerability from nvd – Published: 2026-11-05 02:43 – Updated: 2026-11-05 02:43
VLAI
EPSS
VEX
Summary
Out of bound access in PPC due to race condition in global variable access
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2600 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2600",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eOut of bound access in PPC due to race condition in global variable access\u003c/span\u003e"
}
],
"value": "Out of bound access in PPC due to race condition in global variable access"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-413",
"description": "CWE-413",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:43:02.080Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-48178",
"datePublished": "2026-11-05T02:43:02.080Z",
"dateReserved": "2026-05-21T04:23:11.791Z",
"dateUpdated": "2026-11-05T02:43:02.080Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-48176 (GCVE-0-2026-48176)
Vulnerability from nvd – Published: 2026-11-05 02:36 – Updated: 2026-11-05 02:36
VLAI
EPSS
VEX
Summary
A memory corruption vulnerability caused by improper validation of messages
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1080 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 9110 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < September 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1080",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 9110",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA memory corruption vulnerability caused by improper validation of messages\u003c/span\u003e"
}
],
"value": "A memory corruption vulnerability caused by improper validation of messages"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1284",
"description": "CWE-1284",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:36:58.731Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-48176",
"datePublished": "2026-11-05T02:36:58.731Z",
"dateReserved": "2026-05-21T04:23:11.791Z",
"dateUpdated": "2026-11-05T02:36:58.731Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-48175 (GCVE-0-2026-48175)
Vulnerability from nvd – Published: 2026-11-05 02:43 – Updated: 2026-11-05 02:43
VLAI
EPSS
VEX
Summary
Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
11 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5410 |
Affected:
0 , < September 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5410",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eProcessing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.\u003c/span\u003e"
}
],
"value": "Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1285",
"description": "CWE-1285",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:43:09.443Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-48175",
"datePublished": "2026-11-05T02:43:09.443Z",
"dateReserved": "2026-05-21T04:23:11.791Z",
"dateUpdated": "2026-11-05T02:43:09.443Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-48174 (GCVE-0-2026-48174)
Vulnerability from nvd – Published: 2026-11-05 02:43 – Updated: 2026-11-05 02:43
VLAI
EPSS
VEX
Summary
In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
9 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos W1000 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < September 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W1000",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial\u2011of\u2011service condition.\u003c/span\u003e"
}
],
"value": "In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial\u2011of\u2011service condition."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "CWE-476",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:43:24.241Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-48174",
"datePublished": "2026-11-05T02:43:24.241Z",
"dateReserved": "2026-05-21T04:23:11.791Z",
"dateUpdated": "2026-11-05T02:43:24.241Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-48173 (GCVE-0-2026-48173)
Vulnerability from nvd – Published: 2026-11-05 02:43 – Updated: 2026-11-05 02:43
VLAI
EPSS
VEX
Summary
In the NAS message handler, improper validation of the length field in NAS message causes memory corruption
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
19 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 850 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2100 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos 9110 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos W920 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos W930 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos W1000 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < September 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5410 |
Affected:
0 , < September 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 850",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2100",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 9110",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W920",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W930",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W1000",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5410",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "September 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the NAS message handler, improper validation of the length field in NAS message causes memory corruption\u003c/span\u003e"
}
],
"value": "In the NAS message handler, improper validation of the length field in NAS message causes memory corruption"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:43:32.426Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-48173",
"datePublished": "2026-11-05T02:43:32.426Z",
"dateReserved": "2026-05-21T04:23:11.790Z",
"dateUpdated": "2026-11-05T02:43:32.426Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-35495 (GCVE-0-2026-35495)
Vulnerability from nvd – Published: 2026-11-05 02:36 – Updated: 2026-11-05 02:36
VLAI
EPSS
VEX
Summary
In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1080 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 9110 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1080",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 9110",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability\u003c/span\u003e"
}
],
"value": "In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-754",
"description": "CWE-754",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:36:51.302Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-35495",
"datePublished": "2026-11-05T02:36:51.302Z",
"dateReserved": "2026-04-02T20:57:09.187Z",
"dateUpdated": "2026-11-05T02:36:51.302Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-35494 (GCVE-0-2026-35494)
Vulnerability from nvd – Published: 2026-11-05 02:43 – Updated: 2026-11-05 02:43
VLAI
EPSS
VEX
Summary
In the baseband, memory corruption during NAS packet processing can cause a denial of service.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
9 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W920 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W930 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W920",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W930",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the baseband, memory corruption during NAS packet processing can cause a denial of service.\u003c/span\u003e"
}
],
"value": "In the baseband, memory corruption during NAS packet processing can cause a denial of service."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:43:17.036Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-35494",
"datePublished": "2026-11-05T02:43:17.036Z",
"dateReserved": "2026-04-02T20:57:09.187Z",
"dateUpdated": "2026-11-05T02:43:17.036Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-33972 (GCVE-0-2026-33972)
Vulnerability from nvd – Published: 2026-11-05 02:37 – Updated: 2026-11-05 02:37
VLAI
EPSS
VEX
Summary
In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1080 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 9110 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1080",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 9110",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the Exynos modem\u0027s IMS stack, Out of Bound access occurs due to improper validation.\u003c/span\u003e"
}
],
"value": "In the Exynos modem\u0027s IMS stack, Out of Bound access occurs due to improper validation."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1284",
"description": "CWE-1284",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:37:12.598Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-33972",
"datePublished": "2026-11-05T02:37:12.598Z",
"dateReserved": "2026-03-24T19:59:13.807Z",
"dateUpdated": "2026-11-05T02:37:12.598Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-33971 (GCVE-0-2026-33971)
Vulnerability from nvd – Published: 2026-11-05 02:37 – Updated: 2026-11-05 02:37
VLAI
EPSS
VEX
Summary
In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
15 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 850 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2100 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W920 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W930 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W1000 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5410 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 850",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2100",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W920",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W930",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W1000",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5410",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial\u2011of\u2011service condition.\u003c/span\u003e"
}
],
"value": "In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial\u2011of\u2011service condition."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "CWE-400",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:37:26.712Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-33971",
"datePublished": "2026-11-05T02:37:26.712Z",
"dateReserved": "2026-03-24T19:59:13.807Z",
"dateUpdated": "2026-11-05T02:37:26.712Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-33969 (GCVE-0-2026-33969)
Vulnerability from nvd – Published: 2026-11-05 02:37 – Updated: 2026-11-05 02:37
VLAI
EPSS
VEX
Summary
In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
19 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 850 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2100 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 9110 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W920 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W930 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos W1000 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5410 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 850",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2100",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 9110",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W920",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W930",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos W1000",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5410",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.\u003c/span\u003e"
}
],
"value": "In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-835",
"description": "CWE-835",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:37:19.656Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-33969",
"datePublished": "2026-11-05T02:37:19.656Z",
"dateReserved": "2026-03-24T19:59:13.807Z",
"dateUpdated": "2026-11-05T02:37:19.656Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-33965 (GCVE-0-2026-33965)
Vulnerability from nvd – Published: 2026-11-05 02:37 – Updated: 2026-11-05 02:37
VLAI
EPSS
VEX
Summary
An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1080 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 9110 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1080",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 9110",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eAn attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.\u003c/span\u003e"
}
],
"value": "An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-295",
"description": "CWE-295",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:37:56.040Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-33965",
"datePublished": "2026-11-05T02:37:56.040Z",
"dateReserved": "2026-03-24T19:59:13.806Z",
"dateUpdated": "2026-11-05T02:37:56.040Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-33958 (GCVE-0-2026-33958)
Vulnerability from nvd – Published: 2026-11-05 02:37 – Updated: 2026-11-05 02:37
VLAI
EPSS
VEX
Summary
Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.
Severity
No CVSS data available.
CWE
Assigner
References
1 reference
Impacted products
15 products
| Vendor | Product | Version | |
|---|---|---|---|
| Samsung Semiconductor | Exynos 1080 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2100 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1280 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2200 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1330 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1380 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1480 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1580 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 2500 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos 1680 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5123 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5300 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5400 |
Affected:
0 , < October 2026
(date)
|
|
| Samsung Semiconductor | Exynos Modem 5410 |
Affected:
0 , < October 2026
(date)
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Exynos 1080",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2100",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1280",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2200",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1330",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1380",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1480",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1580",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 2500",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos 1680",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5123",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5300",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5400",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Exynos Modem 5410",
"vendor": "Samsung Semiconductor",
"versions": [
{
"lessThan": "October 2026",
"status": "affected",
"version": "0",
"versionType": "date"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eProcessing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.\u003c/span\u003e"
}
],
"value": "Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1286",
"description": "CWE-1286",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-05T02:37:33.731Z",
"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"shortName": "samsungsemiconductor"
},
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
"assignerShortName": "samsungsemiconductor",
"cveId": "CVE-2026-33958",
"datePublished": "2026-11-05T02:37:33.731Z",
"dateReserved": "2026-03-24T19:59:13.806Z",
"dateUpdated": "2026-11-05T02:37:33.731Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}