CVE-2026-68984None▾ SunlitIn the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.
exynos_2100 < November 2026exynos_1280 < November 2026exynos_2200 < November 2026exynos_1380 < November 2026exynos_1480 < November 2026exynos_2400 < November 2026exynos_1580 < November 2026exynos_2500 < November 2026exynos_2600 < November 2026exynos_1680 < November 2026Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-69005NoneInteger overflow in NPU driver parameter processing due to insufficient bounds checking.
CVE-2026-48175Medium· 5.5Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.
CVE-2026-48173NoneIn the NAS message handler, improper validation of the length field in NAS message causes memory corruption
CVE-2026-35494NoneIn the baseband, memory corruption during NAS packet processing can cause a denial of service.
CVE-2026-68993NoneA double free vulnerability in NPU driver due to improper pointer management (940)
CVE-2026-48178NoneOut of bound access in PPC due to race condition in global variable access