CVE-2026-68994None▾ SunlitA double free vulnerability in NPU driver due to improper pointer management (941)
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A double free vulnerability in NPU driver due to improper pointer management (941)
exynos_1480 < November 2026exynos_2400 < November 2026exynos_1580 < November 2026exynos_2500 < November 2026Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-68993NoneA double free vulnerability in NPU driver due to improper pointer management (940)
CVE-2026-48183NoneImproper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions
CVE-2026-69005NoneInteger overflow in NPU driver parameter processing due to insufficient bounds checking.
CVE-2026-68990NoneIn the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation.
CVE-2026-69025NoneIn the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service
CVE-2026-68991NoneIn the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.