High WID-SEC-2026-4363 8 CVEs

Samsung Exynos: Mehrere Schwachstellen

Published Nov 4, 2026 · Updated Nov 4, 2026 · de-DE

Vendor: Samsung Product: Exynos

Summary

Ein Angreifer kann mehrere Schwachstellen in Samsung Exynos ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Daten zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.

Product

Exynos ist der Markenname für Samsung-Mobilfunk-Chipsätze und Prozessoren.

Vulnerabilities 8

Critical 9.8

CVE-2026-33971

In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a d…

Samsung Semiconductor Exynos 2400 Exynos 1480 Exynos 2500

Nov 5, 2026
Critical 9.1

CVE-2026-48183

Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inap…

Samsung Semiconductor Exynos 2400 Exynos 1480 Exynos 2500

Nov 5, 2026
Critical 9.1

CVE-2026-69043

In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory…

Samsung Semiconductor Exynos 2400 Exynos 1480 Exynos 2500

Nov 5, 2026
High 8.4

CVE-2026-69044

In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.

Samsung Semiconductor Exynos 2500 Exynos 1580 Exynos 1680

Nov 5, 2026
High 7.5

CVE-2026-33958

Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-ser…

Samsung Semiconductor Exynos 2400 Exynos 1480 Exynos 2500

Nov 5, 2026
High 7.5

CVE-2026-33969

In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, lead…

Samsung Semiconductor Exynos 2400 Exynos 1480 Exynos 2500

Nov 5, 2026
Medium 6.3

CVE-2026-68993

A double free vulnerability in NPU driver due to improper pointer management (940)

Samsung Semiconductor Exynos 2400 Exynos 1480

Nov 5, 2026
Medium 5.3

CVE-2026-33965

An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through …

Samsung Semiconductor Exynos Modem 5300 Exynos Modem 5400 Exynos Modem 5123

Nov 5, 2026

Revision history

2026-11-04 #1
Initiale Fassung

References

GitHub Advisory Database vom 2026-11-04
https://github.com/advisories/GHSA-279W-FV9V-X7WV
GitHub Advisory Database vom 2026-11-04
https://github.com/advisories/GHSA-C7JF-MM5V-X692
GitHub Advisory Database vom 2026-11-04
https://github.com/advisories/GHSA-7R74-GCW3-3FCC
GitHub Advisory Database vom 2026-11-04
https://github.com/advisories/GHSA-2V6Q-3MG2-37H2
GitHub Advisory Database vom 2026-11-04
https://github.com/advisories/GHSA-4X4X-53H9-45VJ
GitHub Advisory Database vom 2026-11-04
https://github.com/advisories/GHSA-3MX6-VRJ9-7C42
GitHub Advisory Database vom 2026-11-04
https://github.com/advisories/GHSA-5M5F-WH7X-V6RW
GitHub Advisory Database vom 2026-11-04
https://github.com/advisories/GHSA-MM68-FH65-F3RR