High 1 exploited CVE WID-SEC-2026-4266 13 CVEs

Samsung Exynos: Mehrere Schwachstellen

Published Nov 1, 2026 · Updated Nov 4, 2026 · Revision 2 · de-DE

Vendor: Samsung Product: Exynos

Summary

Ein Angreifer kann mehrere Schwachstellen in Samsung Exynos ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen, einen Denial-of-Service-Zustand auszulösen oder andere, nicht näher spezifizierte Auswirkungen zu verursachen.

Product

Exynos ist der Markenname für Samsung-Mobilfunk-Chipsätze und Prozessoren.

Vulnerabilities 13

High 8.8

CVE-2026-58704 Exploited

In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (p…

Google Android Android

Sep 15, 2026
KEV Sep 16, 2026
Critical 9.8

CVE-2026-68991

In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corr…

Samsung Semiconductor Exynos 2400 Exynos 1480

Nov 5, 2026
Critical 9.8

CVE-2026-69050

Out-of-bounds memory access in a device driver due to improper resource state tracking.

Samsung Semiconductor Exynos 2400 Exynos 1480 Exynos 2500

Nov 5, 2026
Critical 9.1

CVE-2026-69006

Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.

Samsung Semiconductor Exynos 2400 Exynos 1480 Exynos 2500

Nov 5, 2026
Critical 9.1

CVE-2026-69068

Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.

Samsung Semiconductor Exynos Modem 5300 Exynos Modem 5400

Nov 5, 2026
High 8.4

CVE-2026-69066

Memory corruption in GPU driver due to improper validation of VMID reservation.

Samsung Semiconductor Exynos 2400 Exynos 1480 Exynos 2500

Nov 5, 2026
High 8.1

CVE-2026-68984

In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corru…

Samsung Semiconductor Exynos 2400 Exynos 1480 Exynos 2500

Nov 5, 2026
High 7.8

CVE-2026-68990

In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption,…

Samsung Semiconductor Exynos 2400 Exynos 1480 Exynos 2500

Nov 5, 2026
High 7.5

CVE-2026-68985

In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds w…

Samsung Semiconductor Exynos 2200 Exynos 1380 Exynos 1280

Nov 5, 2026
High 7.5

CVE-2026-69002

Incorrect authorization in Samsung framework services due to missing permission checks

Samsung Semiconductor Exynos 2500 Exynos 1580 Exynos 1680

Nov 5, 2026
High 7.5

CVE-2026-69025

In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, wh…

Samsung Semiconductor Exynos 2400 Exynos 1480

Nov 5, 2026
High 7.3

CVE-2026-68994

A double free vulnerability in NPU driver due to improper pointer management (941)

Samsung Semiconductor Exynos 2400 Exynos 1480 Exynos 2500

Nov 5, 2026
High 7.3

CVE-2026-69005

Integer overflow in NPU driver parameter processing due to insufficient bounds checking.

Samsung Semiconductor Exynos 2400 Exynos 1480 Exynos 2500

Nov 5, 2026

Revision history

2026-11-04 #2
Referenz(en) aufgenommen: EUVD-2026-117284, EUVD-2026-117293, EUVD-2026-117291, EUVD-2026-117290, EUVD-2026-117289, EUVD-2026-117288, EUVD-2026-117287, EUVD-2026-117286, EUVD-2026-117285, EUVD-2026-117283, EUVD-2026-117282, EUVD-2026-117281
2026-11-01 #1
Initiale Fassung

References

Samsung Security Advisory vom 2026-11-01
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-58704/
Samsung Security Advisory vom 2026-11-01
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-68984/
Samsung Security Advisory vom 2026-11-01
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-68985/
Samsung Security Advisory vom 2026-11-01
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-68990/
Samsung Security Advisory vom 2026-11-01
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-68991/
Samsung Security Advisory vom 2026-11-01
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-68994/
Samsung Security Advisory vom 2026-11-01
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-69002/
Samsung Security Advisory vom 2026-11-01
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-69005/
Samsung Security Advisory vom 2026-11-01
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-69006/
Samsung Security Advisory vom 2026-11-01
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-69025/
Samsung Security Advisory vom 2026-11-01
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-69050/
Samsung Security Advisory vom 2026-11-01
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-69066/
Samsung Security Advisory vom 2026-11-01
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-69068/