Vulnerabilities in Samsung Semiconductor
35 resultsCVE-2026-33971—In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condEPSS 0.2%CVE-2026-33969—In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of ServEPSS 0.2%CVE-2026-48174—In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condiEPSS 0.2%CVE-2025-66368—Incorrect handling of SDP payload leads to a Denial of ServiceEPSS 0.1%CVE-2025-66365—Incorrect handling of SIP packets leads to baseband crashesEPSS 0.1%CVE-2026-35495—In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerabilityEPSS 0.1%CVE-2026-33958—Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.EPSS 0.1%CVE-2025-66367—Improper handling of NAS DLTransport messages may lead to a baseband crash.EPSS 0.1%CVE-2026-33972—In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.EPSS 0.1%CVE-2026-33965—An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.EPSS 0.1%CVE-2026-48186—Improper handling of messages before AS security activation can cause unexpected behaviorEPSS 0.1%CVE-2026-48173—In the NAS message handler, improper validation of the length field in NAS message causes memory corruptionEPSS 0.1%CVE-2026-68991—In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a EPSS 0.1%CVE-2026-68994—A double free vulnerability in NPU driver due to improper pointer management (941)EPSS 0.1%CVE-2026-69005—Integer overflow in NPU driver parameter processing due to insufficient bounds checking.EPSS 0.1%CVE-2026-69044—In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.EPSS 0.1%CVE-2026-69066—Memory corruption in GPU driver due to improper validation of VMID reservation.EPSS 0.1%CVE-2026-68993—A double free vulnerability in NPU driver due to improper pointer management (940)EPSS 0.1%CVE-2026-68984—In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.EPSS 0.1%CVE-2026-69068—Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.EPSS 0.1%