CVE-2026-69025None▾ SunlitIn the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service
exynos_1480 < November 2026exynos_2400 < November 2026Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-68993NoneA double free vulnerability in NPU driver due to improper pointer management (940)
CVE-2026-48174NoneIn the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
CVE-2026-68994NoneA double free vulnerability in NPU driver due to improper pointer management (941)
CVE-2026-48183NoneImproper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions
CVE-2026-69005NoneInteger overflow in NPU driver parameter processing due to insufficient bounds checking.
CVE-2026-68990NoneIn the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation.