Samsung Semiconductor
Vulnerability activity for Samsung Semiconductor: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 35
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 35
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 35
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos Modem 5300 Memory corruptionCVE-2026-69068Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 2200 Memory corruptionCVE-2026-69066Memory corruption in GPU driver due to improper validation of VMID reservation.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1480 Memory corruptionCVE-2026-69050Out-of-bounds memory access in a device driver due to improper resource state tracking.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1580 Memory corruptionCVE-2026-69044In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 2200 Memory corruptionCVE-2026-69043In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1480 Memory corruptionCVE-2026-69025In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 850 Memory corruptionCVE-2026-69006Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1480 Memory corruptionCVE-2026-69005Integer overflow in NPU driver parameter processing due to insufficient bounds checking.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1580 Auth bypass / access controlCVE-2026-69002Incorrect authorization in Samsung framework services due to missing permission checks
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1480 Memory corruptionCVE-2026-68994A double free vulnerability in NPU driver due to improper pointer management (941)
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1480 Memory corruptionCVE-2026-68993A double free vulnerability in NPU driver due to improper pointer management (940)
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1480 Memory corruptionCVE-2026-68991In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1480 Memory corruptionCVE-2026-68990In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1280 Memory corruptionCVE-2026-68985In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 2100 Memory corruptionCVE-2026-68984In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1280CVE-2026-48186Improper handling of messages before AS security activation can cause unexpected behavior
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1480CVE-2026-48183Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1080 Denial of serviceCVE-2026-48179In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 2200CVE-2026-48178Out of bound access in PPC due to race condition in global variable access
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1080 Memory corruptionCVE-2026-48176A memory corruption vulnerability caused by improper validation of messages
- 5.5MediumNov 5, 2026Samsung Semiconductor Exynos 1280 Memory corruptionCVE-2026-48175Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1280 Memory corruptionCVE-2026-48174In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 850 Memory corruptionCVE-2026-48173In the NAS message handler, improper validation of the length field in NAS message causes memory corruption
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1080CVE-2026-35495In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1280 Memory corruptionCVE-2026-35494In the baseband, memory corruption during NAS packet processing can cause a denial of service.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1080CVE-2026-33972In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 850 Denial of serviceCVE-2026-33971In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 850 Denial of serviceCVE-2026-33969In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1080 Crypto / certificateCVE-2026-33965An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1080 Memory corruptionCVE-2026-33958Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1080 Denial of serviceCVE-2025-66368Incorrect handling of SDP payload leads to a Denial of Service
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 850 Memory corruptionCVE-2025-66367Improper handling of NAS DLTransport messages may lead to a baseband crash.
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1280CVE-2025-66366Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 1080CVE-2025-66365Incorrect handling of SIP packets leads to baseband crashes
- –UnscoredNov 5, 2026Samsung Semiconductor Exynos 850CVE-2025-66364Continuously sending control‑plane messages causes the baseband to crashes.
Top products
- Exynos 14808 CVEs in the last year
- Exynos 10808 CVEs in the last year
- Exynos 8506 CVEs in the last year
- Exynos 12806 CVEs in the last year
- Exynos 22003 CVEs in the last year
- Exynos 15802 CVEs in the last year
- Exynos Modem 53001 CVE in the last year
- Exynos 21001 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.