CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-69005Integer overflow in NPU driver parameter processing due to insufficient bounds checking.Samsung Semiconductor Exynos
- CVE-2026-68985In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes…Samsung Semiconductor Exynos
- CVE-2026-69006Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.Samsung Semiconductor Exynos
- CVE-2026-69068Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.Samsung Semiconductor Exynos Modem
- CVE-2026-69025In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial…Samsung Semiconductor Exynos
- CVE-2026-68990In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially…Samsung Semiconductor Exynos
- CVE-2026-68991In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to…Samsung Semiconductor Exynos
- CVE-2026-69002Incorrect authorization in Samsung framework services due to missing permission checksSamsung Semiconductor Exynos
- CVE-2026-69066Memory corruption in GPU driver due to improper validation of VMID reservation.Samsung Semiconductor Exynos
- CVE-2026-69050Out-of-bounds memory access in a device driver due to improper resource state tracking.Samsung Semiconductor Exynos
- CVE-2026-69043In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruptionSamsung Semiconductor Exynos
- CVE-2026-69044In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.Samsung Semiconductor Exynos
- CVE-2025-66366Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crashSamsung Semiconductor Exynos
- CVE-2026-33965An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.Samsung Semiconductor Exynos
- CVE-2025-66367Improper handling of NAS DLTransport messages may lead to a baseband crash.Samsung Semiconductor Exynos
- CVE-2025-66368Incorrect handling of SDP payload leads to a Denial of ServiceSamsung Semiconductor Exynos
- CVE-2026-33958Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.Samsung Semiconductor Exynos
- CVE-2026-33971In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service…Samsung Semiconductor Exynos
- CVE-2026-33969In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of…Samsung Semiconductor Exynos
- CVE-2026-33972In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.Samsung Semiconductor Exynos
- CVE-2026-48179In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of ServiceSamsung Semiconductor Exynos
- CVE-2026-48176A memory corruption vulnerability caused by improper validation of messagesSamsung Semiconductor Exynos
- CVE-2026-35495In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerabilitySamsung Semiconductor Exynos
- CVE-2026-122992In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty…G4KLX DStarGateway
- CVE-2026-122160myshell-ai AIlice HuggingFace Model Wrapper AModelCausalLM.py LoadModel_PEFT inclusion of functionality from untrusted control spheremyshell-ai AIlice
- CVE-2026-122323Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompressionkyverno
- CVE-2026-122322Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompressionkyverno
- CVE-2026-122321Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypasskyverno
- CVE-2026-122320Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clonekyverno
- CVE-2026-122319Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panickyverno