PatchTheCVEexynos 1280 vulnerabilities and fixes
Recent CVEs affecting exynos 1280, with upgrade or downgrade steps. 13 tracked.
Also searched as: exynos1280.
exynos 1280 has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-11-05. Highest priority: CVE-2026-48173 (score 0/100).
- CVE-2026-48173 HIGH n/a MITIGATE MITIGATE In the NAS message handler, improper validation of the length field in NAS message causes memory corruption
- CVE-2026-48174 HIGH n/a MITIGATE MITIGATE In the NR RRC component, improper handling of messages before authentication triggers a data abort, which lead
- CVE-2026-35494 HIGH n/a MITIGATE MITIGATE In the baseband, memory corruption during NAS packet processing can cause a denial of service.
- CVE-2026-48175 HIGH n/a MITIGATE MITIGATE Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.
- CVE-2026-48186 HIGH n/a MITIGATE MITIGATE Improper handling of messages before AS security activation can cause unexpected behavior
- CVE-2026-68984 HIGH n/a MITIGATE MITIGATE In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger mem
- CVE-2026-68985 HIGH n/a MITIGATE MITIGATE In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of
- CVE-2026-69006 HIGH n/a MITIGATE MITIGATE Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.
- CVE-2025-66366 HIGH n/a MITIGATE MITIGATE Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash
- CVE-2025-66367 HIGH n/a MITIGATE MITIGATE Improper handling of NAS DLTransport messages may lead to a baseband crash.
- CVE-2026-33958 HIGH n/a MITIGATE MITIGATE Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a deni
- CVE-2026-33971 HIGH n/a MITIGATE MITIGATE In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which lea
- CVE-2026-33969 HIGH n/a MITIGATE MITIGATE In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite l
FAQ
How do I fix exynos 1280 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is exynos 1280 being exploited right now?
None of the tracked exynos 1280 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which exynos 1280 CVE should I patch first?
CVE-2026-48173 currently ranks highest (0/100): In the NAS message handler, improper validation of the length field in NAS message causes memory corruption.