Skip to main content
← Vulnerabilities

In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.

Exploited
No known exploitation
Fix
Fixed in October 2026
Who is exposed
Not reported

Do first: Upgrade to a fixed version: October 2026.

Published
Last modified
0/100 · provisional
None on Exploit-DB, Metasploit or GitHub

Summary

In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption. The facts provided do not say how an attacker reaches this flaw or what access is needed to trigger it.

Written by anthropic/claude-haiku-5.5 from the sources below. Verify against them.

Read the original description

In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.

cve.now Index

0Pcve.now Index 0 of 100 · methodology v3 · provisional
  • Exploitation?/40Unknown. No CISA SSVC exploitation rating yet
  • Exposure?/25Unknown. No advisory context yet
  • Reach?/20Unknown. No tracked technology or package matched
  • Severity?/10Unknown. No CVSS score or vendor rating
  • No patch0/5No signal

What would change the score

  • Would score about 55 if added to CISA KEV
  • Would score about 50 if CISA's SSVC rates exploitation active
  • Would score about 22 if advisories confirm default setups are exposed

What to do

  • Upgrade to a fixed version: October 2026.

Timeline

  1. CVE published
  2. First seen by cve.now

Affected versions

  • Samsung Semiconductor Exynos 1580

    fixed in October 2026

  • Samsung Semiconductor Exynos 2500

    fixed in October 2026

  • Samsung Semiconductor Exynos 2600

    fixed in October 2026

  • Samsung Semiconductor Exynos 1680

    fixed in October 2026

Evidence 1

  1. Link

Corrections

None so far.

Something wrong on this page? Report an error. Every fix is listed here.

Questions about CVE-2026-69044

Is CVE-2026-69044 being exploited?

It is not in CISA's Known Exploited Vulnerabilities catalog, and CISA's SSVC assessment does not mark exploitation as active. That does not mean it has not been attacked: vendors and researchers can report attacks before CISA lists them. No public exploit code is tracked.Source: cve.now feed data

Which versions are affected by CVE-2026-69044?

Exynos 1580: before October 2026. Exynos 2500: before October 2026. Exynos 2600: before October 2026. Exynos 1680: before October 2026.Source: cve.now feed data

How do I fix CVE-2026-69044?

Upgrade to a fixed version: October 2026.Source: cve.now feed data