Samsung Semiconductor vulnerabilities

Newest CVEs

• CVE-2026-48173

  In the NAS message handler, improper validation of the length field in NAS message causes memory corruption

  Samsung Semiconductor · Exynos 850

  Not scored
• CVE-2026-48174

  In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

  Samsung Semiconductor · Exynos 1280

  Not scored
• CVE-2026-35494

  In the baseband, memory corruption during NAS packet processing can cause a denial of service.

  Samsung Semiconductor · Exynos 1280

  Not scored
• CVE-2026-48175

  Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.

  Samsung Semiconductor · Exynos 1280

  Medium5.5
• CVE-2026-48178

  Out of bound access in PPC due to race condition in global variable access

  Samsung Semiconductor · Exynos 2200

  Not scored
• CVE-2026-48186

  Improper handling of messages before AS security activation can cause unexpected behavior

  Samsung Semiconductor · Exynos 1280

  Not scored
• CVE-2026-68993

  A double free vulnerability in NPU driver due to improper pointer management (940)

  Samsung Semiconductor · Exynos 1480

  Not scored
• CVE-2026-68994

  A double free vulnerability in NPU driver due to improper pointer management (941)

  Samsung Semiconductor · Exynos 1480

  Not scored
• CVE-2026-48183

  Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions

  Samsung Semiconductor · Exynos 1480

  Not scored
• CVE-2026-68984

  In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.

  Samsung Semiconductor · Exynos 2100

  Not scored