PatchTheCVEexynos 2400 vulnerabilities and fixes
Recent CVEs affecting exynos 2400, with upgrade or downgrade steps. 17 tracked.
Also searched as: exynos2400.
exynos 2400 has 17 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-11-05. Highest priority: CVE-2026-48174 (score 0/100).
- CVE-2026-48174 HIGH n/a MITIGATE MITIGATE In the NR RRC component, improper handling of messages before authentication triggers a data abort, which lead
- CVE-2026-35494 HIGH n/a MITIGATE MITIGATE In the baseband, memory corruption during NAS packet processing can cause a denial of service.
- CVE-2026-48175 HIGH n/a MITIGATE MITIGATE Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.
- CVE-2026-48178 HIGH n/a MITIGATE MITIGATE Out of bound access in PPC due to race condition in global variable access
- CVE-2026-48186 HIGH n/a MITIGATE MITIGATE Improper handling of messages before AS security activation can cause unexpected behavior
- CVE-2026-68993 HIGH n/a MITIGATE MITIGATE A double free vulnerability in NPU driver due to improper pointer management (940)
- CVE-2026-68994 HIGH n/a MITIGATE MITIGATE A double free vulnerability in NPU driver due to improper pointer management (941)
- CVE-2026-48183 HIGH n/a MITIGATE MITIGATE Improper permission handling during buffer operations allows untrusted applications to create memory mappings
- CVE-2026-68984 HIGH n/a MITIGATE MITIGATE In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger mem
- CVE-2026-69005 HIGH n/a MITIGATE MITIGATE Integer overflow in NPU driver parameter processing due to insufficient bounds checking.
- CVE-2026-69025 HIGH n/a MITIGATE MITIGATE In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds
- CVE-2026-68990 HIGH n/a MITIGATE MITIGATE In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory co
- CVE-2026-68991 HIGH n/a MITIGATE MITIGATE In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause me
- CVE-2026-69066 HIGH n/a MITIGATE MITIGATE Memory corruption in GPU driver due to improper validation of VMID reservation.
- CVE-2026-69050 HIGH n/a MITIGATE MITIGATE Out-of-bounds memory access in a device driver due to improper resource state tracking.
- CVE-2026-69043 HIGH n/a MITIGATE MITIGATE In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead
- CVE-2025-66366 HIGH n/a MITIGATE MITIGATE Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash
FAQ
How do I fix exynos 2400 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is exynos 2400 being exploited right now?
None of the tracked exynos 2400 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which exynos 2400 CVE should I patch first?
CVE-2026-48174 currently ranks highest (0/100): In the NR RRC component, improper handling of messages before authentication triggers a data abort, which lead.