PatchTheCVEsamsung semiconductor vulnerabilities
Recent CVEs affecting samsung semiconductor products. 27 tracked.
samsung semiconductor has 27 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-11-05. Highest priority: CVE-2026-48173 (score 0/100).
- CVE-2026-48173 HIGH n/a MITIGATE MITIGATE In the NAS message handler, improper validation of the length field in NAS message causes memory corruption
- CVE-2026-48174 HIGH n/a MITIGATE MITIGATE In the NR RRC component, improper handling of messages before authentication triggers a data abort, which lead
- CVE-2026-35494 HIGH n/a MITIGATE MITIGATE In the baseband, memory corruption during NAS packet processing can cause a denial of service.
- CVE-2026-48175 HIGH n/a MITIGATE MITIGATE Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.
- CVE-2026-48178 HIGH n/a MITIGATE MITIGATE Out of bound access in PPC due to race condition in global variable access
- CVE-2026-48186 HIGH n/a MITIGATE MITIGATE Improper handling of messages before AS security activation can cause unexpected behavior
- CVE-2026-68993 HIGH n/a MITIGATE MITIGATE A double free vulnerability in NPU driver due to improper pointer management (940)
- CVE-2026-68994 HIGH n/a MITIGATE MITIGATE A double free vulnerability in NPU driver due to improper pointer management (941)
- CVE-2026-48183 HIGH n/a MITIGATE MITIGATE Improper permission handling during buffer operations allows untrusted applications to create memory mappings
- CVE-2026-68984 HIGH n/a MITIGATE MITIGATE In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger mem
- CVE-2026-69005 HIGH n/a MITIGATE MITIGATE Integer overflow in NPU driver parameter processing due to insufficient bounds checking.
- CVE-2026-68985 HIGH n/a MITIGATE MITIGATE In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of
- CVE-2026-69006 HIGH n/a MITIGATE MITIGATE Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.
- CVE-2026-69068 HIGH n/a MITIGATE MITIGATE Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.
- CVE-2026-69025 HIGH n/a MITIGATE MITIGATE In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds
- CVE-2026-68990 HIGH n/a MITIGATE MITIGATE In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory co
- CVE-2026-68991 HIGH n/a MITIGATE MITIGATE In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause me
- CVE-2026-69002 HIGH n/a MITIGATE MITIGATE Incorrect authorization in Samsung framework services due to missing permission checks
- CVE-2026-69066 HIGH n/a MITIGATE MITIGATE Memory corruption in GPU driver due to improper validation of VMID reservation.
- CVE-2026-69050 HIGH n/a MITIGATE MITIGATE Out-of-bounds memory access in a device driver due to improper resource state tracking.
- CVE-2026-69043 HIGH n/a MITIGATE MITIGATE In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead
- CVE-2026-69044 HIGH n/a MITIGATE MITIGATE In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corr
- CVE-2025-66366 HIGH n/a MITIGATE MITIGATE Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash
- CVE-2026-33965 HIGH n/a MITIGATE MITIGATE An attacker may send a malicious IMS message to the target device, potentially leading to information exposure
- CVE-2025-66367 HIGH n/a MITIGATE MITIGATE Improper handling of NAS DLTransport messages may lead to a baseband crash.
- CVE-2025-66368 HIGH n/a MITIGATE MITIGATE Incorrect handling of SDP payload leads to a Denial of Service
- CVE-2026-33958 HIGH n/a MITIGATE MITIGATE Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a deni
FAQ
How do I fix samsung semiconductor vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is samsung semiconductor being exploited right now?
None of the tracked samsung semiconductor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which samsung semiconductor CVE should I patch first?
CVE-2026-48173 currently ranks highest (0/100): In the NAS message handler, improper validation of the length field in NAS message causes memory corruption.