Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-69006 EUVD-2026-117288GHSA-4qxg-cc63-6h3j

Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.

Published Nov 5, 2026 · Updated Nov 10, 2026 · Assigned by samsungsemiconductor

Vendor: Samsung Semiconductor Product: Exynos 1280 Product: Exynos 1330 Product: Exynos 1380 Product: Exynos 1480 Product: Exynos 1580 Product: Exynos 1680 Product: Exynos 2100 Product: Exynos 2200 Product: Exynos 2400 Product: Exynos 2500 Product: Exynos 850 Product: Exynos Modem 5410 Product: Exynos W1000 Product: Exynos W920 Product: Exynos W930

Description

Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.

Affected products

VendorProductAffectedFixed
Samsung Semiconductor Exynos 850 < November 2026 November 2026
Samsung Semiconductor Exynos 2100 < November 2026 November 2026
Samsung Semiconductor Exynos 1280 < November 2026 November 2026
Samsung Semiconductor Exynos 2200 < November 2026 November 2026
Samsung Semiconductor Exynos 1330 < November 2026 November 2026
Samsung Semiconductor Exynos 1380 < November 2026 November 2026
Samsung Semiconductor Exynos 1480 < November 2026 November 2026
Samsung Semiconductor Exynos 2400 < November 2026 November 2026
Samsung Semiconductor Exynos 1580 < November 2026 November 2026
Samsung Semiconductor Exynos 2500 < November 2026 November 2026
Samsung Semiconductor Exynos 1680 < November 2026 November 2026
Samsung Semiconductor Exynos W920 < November 2026 November 2026
Samsung Semiconductor Exynos W930 < November 2026 November 2026
Samsung Semiconductor Exynos W1000 < November 2026 November 2026
Samsung Semiconductor Exynos Modem 5410 < November 2026 November 2026

Advisories 1

References