Vulnerabilities in Samsung Semiconductor
35 resultsCVE-2026-68990—In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading EPSS 0.1%CVE-2026-48176—A memory corruption vulnerability caused by improper validation of messagesEPSS 0.1%CVE-2026-69025—In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial oEPSS 0.1%CVE-2025-66366—Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crashEPSS 0.1%CVE-2026-48179—In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of ServiceEPSS 0.1%CVE-2026-69050—Out-of-bounds memory access in a device driver due to improper resource state tracking.EPSS 0.1%CVE-2026-69043—In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruptionEPSS 0.1%CVE-2026-69006—Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.EPSS 0.1%CVE-2026-35494—In the baseband, memory corruption during NAS packet processing can cause a denial of service.EPSS 0.1%CVE-2026-68985—In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a EPSS 0.1%CVE-2025-66364—Continuously sending control‑plane messages causes the baseband to crashes.EPSS 0.1%CVE-2026-48183—Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissionsEPSS 0.1%CVE-2026-69002—Incorrect authorization in Samsung framework services due to missing permission checksEPSS 0.1%CVE-2026-48178—Out of bound access in PPC due to race condition in global variable accessEPSS 0.1%CVE-2026-48175MEDIUMProcessing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.EPSS 0.1%