Samsung Semiconductor has 35 CVEs on record. Disclosure cadence is accelerating: 35 in the last 90 days against 0 in the 90 before. The busiest recent month was November 2026 with 35. The median CVSS is 5.5 (medium). None have a confirmed exploitation report. The dominant weakness classes are CWE-754 (7) and CWE-787 (5). Most affected products: Exynos 1080 (8), Exynos 1480 (8), Exynos 1280 (6).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.5
- Publish → KEV
- —
- Last 90 days
- 35 prev 0
Weakness classes
Products
- Exynos 1080 8
- Exynos 1480 8
- Exynos 1280 6
- Exynos 850 6
- Exynos 2200 3
- Exynos 1580 2
Worst active — by depth score
CVE-2026-48175Medium· 5.5Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.30CVE-2026-69068NoneInsufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.3CVE-2026-69066NoneMemory corruption in GPU driver due to improper validation of VMID reservation.3CVE-2026-69050NoneOut-of-bounds memory access in a device driver due to improper resource state tracking.3CVE-2026-69044NoneIn the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.3
Samsung Semiconductor vulnerabilities
CVEs affecting Samsung Semiconductor, newest first. Open any entry for full detail, references, and exploit status.
35 CVEsRSS
CVE-2026-48176NoneA memory corruption vulnerability caused by improper validation of messages
A memory corruption vulnerability caused by improper validation of messages
CVE-2026-33972NoneIn the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.
In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.
CVE-2026-35495NoneIn IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability
In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability
CVE-2025-66365NoneIncorrect handling of SIP packets leads to baseband crashes
Incorrect handling of SIP packets leads to baseband crashes
CVE-2025-66364NoneContinuously sending control‑plane messages causes the baseband to crashes.
Continuously sending control‑plane messages causes the baseband to crashes.