https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-48173.htmlhttps://patchthecve.com/cve/CVE-2026-48173.htmlThu, 05 Nov 2026 02:43:32 +0000HIGH n/a: In the NAS message handler, improper validation of the length field in NAS message causes memory corruptionhttps://patchthecve.com/cve/CVE-2026-48174.htmlhttps://patchthecve.com/cve/CVE-2026-48174.htmlThu, 05 Nov 2026 02:43:24 +0000HIGH n/a: In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.https://patchthecve.com/cve/CVE-2026-35494.htmlhttps://patchthecve.com/cve/CVE-2026-35494.htmlThu, 05 Nov 2026 02:43:17 +0000HIGH n/a: In the baseband, memory corruption during NAS packet processing can cause a denial of service.https://patchthecve.com/cve/CVE-2026-48175.htmlhttps://patchthecve.com/cve/CVE-2026-48175.htmlThu, 05 Nov 2026 02:43:09 +0000HIGH n/a: Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.https://patchthecve.com/cve/CVE-2026-48178.htmlhttps://patchthecve.com/cve/CVE-2026-48178.htmlThu, 05 Nov 2026 02:43:02 +0000HIGH n/a: Out of bound access in PPC due to race condition in global variable accesshttps://patchthecve.com/cve/CVE-2026-48186.htmlhttps://patchthecve.com/cve/CVE-2026-48186.htmlThu, 05 Nov 2026 02:42:54 +0000HIGH n/a: Improper handling of messages before AS security activation can cause unexpected behaviorhttps://patchthecve.com/cve/CVE-2026-68993.htmlhttps://patchthecve.com/cve/CVE-2026-68993.htmlThu, 05 Nov 2026 02:42:47 +0000HIGH n/a: A double free vulnerability in NPU driver due to improper pointer management (940)https://patchthecve.com/cve/CVE-2026-68994.htmlhttps://patchthecve.com/cve/CVE-2026-68994.htmlThu, 05 Nov 2026 02:42:38 +0000HIGH n/a: A double free vulnerability in NPU driver due to improper pointer management (941)https://patchthecve.com/cve/CVE-2026-48183.htmlhttps://patchthecve.com/cve/CVE-2026-48183.htmlThu, 05 Nov 2026 02:42:31 +0000HIGH n/a: Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissionshttps://patchthecve.com/cve/CVE-2026-68984.htmlhttps://patchthecve.com/cve/CVE-2026-68984.htmlThu, 05 Nov 2026 02:41:23 +0000HIGH n/a: In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.https://patchthecve.com/cve/CVE-2026-69005.htmlhttps://patchthecve.com/cve/CVE-2026-69005.htmlThu, 05 Nov 2026 02:41:16 +0000HIGH n/a: Integer overflow in NPU driver parameter processing due to insufficient bounds checking.https://patchthecve.com/cve/CVE-2026-68985.htmlhttps://patchthecve.com/cve/CVE-2026-68985.htmlThu, 05 Nov 2026 02:41:07 +0000HIGH n/a: In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.https://patchthecve.com/cve/CVE-2026-69006.htmlhttps://patchthecve.com/cve/CVE-2026-69006.htmlThu, 05 Nov 2026 02:41:00 +0000HIGH n/a: Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.https://patchthecve.com/cve/CVE-2026-69068.htmlhttps://patchthecve.com/cve/CVE-2026-69068.htmlThu, 05 Nov 2026 02:40:53 +0000HIGH n/a: Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.https://patchthecve.com/cve/CVE-2026-69025.htmlhttps://patchthecve.com/cve/CVE-2026-69025.htmlThu, 05 Nov 2026 02:40:45 +0000HIGH n/a: In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of servicehttps://patchthecve.com/cve/CVE-2026-68990.htmlhttps://patchthecve.com/cve/CVE-2026-68990.htmlThu, 05 Nov 2026 02:40:38 +0000HIGH n/a: In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation.https://patchthecve.com/cve/CVE-2026-68991.htmlhttps://patchthecve.com/cve/CVE-2026-68991.htmlThu, 05 Nov 2026 02:40:30 +0000HIGH n/a: In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.https://patchthecve.com/cve/CVE-2026-69002.htmlhttps://patchthecve.com/cve/CVE-2026-69002.htmlThu, 05 Nov 2026 02:40:22 +0000HIGH n/a: Incorrect authorization in Samsung framework services due to missing permission checkshttps://patchthecve.com/cve/CVE-2026-69066.htmlhttps://patchthecve.com/cve/CVE-2026-69066.htmlThu, 05 Nov 2026 02:40:15 +0000HIGH n/a: Memory corruption in GPU driver due to improper validation of VMID reservation.https://patchthecve.com/cve/CVE-2026-69050.htmlhttps://patchthecve.com/cve/CVE-2026-69050.htmlThu, 05 Nov 2026 02:40:08 +0000HIGH n/a: Out-of-bounds memory access in a device driver due to improper resource state tracking.https://patchthecve.com/cve/CVE-2026-69043.htmlhttps://patchthecve.com/cve/CVE-2026-69043.htmlThu, 05 Nov 2026 02:39:59 +0000HIGH n/a: In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruptionhttps://patchthecve.com/cve/CVE-2026-69044.htmlhttps://patchthecve.com/cve/CVE-2026-69044.htmlThu, 05 Nov 2026 02:39:51 +0000HIGH n/a: In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.https://patchthecve.com/cve/CVE-2025-66366.htmlhttps://patchthecve.com/cve/CVE-2025-66366.htmlThu, 05 Nov 2026 02:38:04 +0000HIGH n/a: Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crashhttps://patchthecve.com/cve/CVE-2026-33965.htmlhttps://patchthecve.com/cve/CVE-2026-33965.htmlThu, 05 Nov 2026 02:37:56 +0000HIGH n/a: An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.https://patchthecve.com/cve/CVE-2025-66367.htmlhttps://patchthecve.com/cve/CVE-2025-66367.htmlThu, 05 Nov 2026 02:37:48 +0000HIGH n/a: Improper handling of NAS DLTransport messages may lead to a baseband crash.https://patchthecve.com/cve/CVE-2025-66368.htmlhttps://patchthecve.com/cve/CVE-2025-66368.htmlThu, 05 Nov 2026 02:37:40 +0000HIGH n/a: Incorrect handling of SDP payload leads to a Denial of Servicehttps://patchthecve.com/cve/CVE-2026-33958.htmlhttps://patchthecve.com/cve/CVE-2026-33958.htmlThu, 05 Nov 2026 02:37:33 +0000HIGH n/a: Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.https://patchthecve.com/cve/CVE-2026-33971.htmlhttps://patchthecve.com/cve/CVE-2026-33971.htmlThu, 05 Nov 2026 02:37:26 +0000HIGH n/a: In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.https://patchthecve.com/cve/CVE-2026-33969.htmlhttps://patchthecve.com/cve/CVE-2026-33969.htmlThu, 05 Nov 2026 02:37:19 +0000HIGH n/a: In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.https://patchthecve.com/cve/CVE-2026-33972.htmlhttps://patchthecve.com/cve/CVE-2026-33972.htmlThu, 05 Nov 2026 02:37:12 +0000HIGH n/a: In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.https://patchthecve.com/cve/CVE-2026-48179.htmlhttps://patchthecve.com/cve/CVE-2026-48179.htmlThu, 05 Nov 2026 02:37:05 +0000HIGH n/a: In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Servicehttps://patchthecve.com/cve/CVE-2026-48176.htmlhttps://patchthecve.com/cve/CVE-2026-48176.htmlThu, 05 Nov 2026 02:36:58 +0000HIGH n/a: A memory corruption vulnerability caused by improper validation of messageshttps://patchthecve.com/cve/CVE-2026-35495.htmlhttps://patchthecve.com/cve/CVE-2026-35495.htmlThu, 05 Nov 2026 02:36:51 +0000HIGH n/a: In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerabilityhttps://patchthecve.com/cve/CVE-2025-66365.htmlhttps://patchthecve.com/cve/CVE-2025-66365.htmlThu, 05 Nov 2026 02:24:51 +0000HIGH n/a: Incorrect handling of SIP packets leads to baseband crashes