exynos_2200 vulnerabilities
CVEs whose affected-version data names the exynos_2200 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
15 CVEsRSS
CVE-2026-48173NoneIn the NAS message handler, improper validation of the length field in NAS message causes memory corruption
In the NAS message handler, improper validation of the length field in NAS message causes memory corruption
CVE-2026-35494NoneIn the baseband, memory corruption during NAS packet processing can cause a denial of service.
In the baseband, memory corruption during NAS packet processing can cause a denial of service.
CVE-2026-48178NoneOut of bound access in PPC due to race condition in global variable access
Out of bound access in PPC due to race condition in global variable access
CVE-2026-48174NoneIn the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
CVE-2026-48186NoneImproper handling of messages before AS security activation can cause unexpected behavior
Improper handling of messages before AS security activation can cause unexpected behavior
CVE-2026-68985NoneIn the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.
In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.
CVE-2026-68984NoneIn the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.
In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.
CVE-2026-69006NoneInsufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.
Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.
CVE-2026-69066NoneMemory corruption in GPU driver due to improper validation of VMID reservation.
Memory corruption in GPU driver due to improper validation of VMID reservation.
CVE-2026-69043NoneIn the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption
In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption
CVE-2025-66367NoneImproper handling of NAS DLTransport messages may lead to a baseband crash.
Improper handling of NAS DLTransport messages may lead to a baseband crash.
CVE-2026-33971NoneIn the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
CVE-2026-33969NoneIn the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.
In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.
CVE-2026-33958NoneProcessing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.
Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.
CVE-2025-66364NoneContinuously sending control‑plane messages causes the baseband to crashes.
Continuously sending control‑plane messages causes the baseband to crashes.