# cve.now: Samsung Semiconductor The newest entries naming Samsung Semiconductor as an affected vendor (up to 200), of 35 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md. - [CVE-2026-48173](https://cve.now/CVE-2026-48173.md): In the NAS message handler, improper validation of the length field in NAS message causes memory corruption (CVSS 9.8) - [CVE-2026-48174](https://cve.now/CVE-2026-48174.md): In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service… (CVSS 9.8) - [CVE-2026-35494](https://cve.now/CVE-2026-35494.md): In the baseband, memory corruption during NAS packet processing can cause a denial of service. (CVSS 7.5) - [CVE-2026-48175](https://cve.now/CVE-2026-48175.md): Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition. (CVSS 5.5) - [CVE-2026-48178](https://cve.now/CVE-2026-48178.md): Out of bound access in PPC due to race condition in global variable access (CVSS 8.8) - [CVE-2026-48186](https://cve.now/CVE-2026-48186.md): Improper handling of messages before AS security activation can cause unexpected behavior (CVSS 9.1) - [CVE-2026-68993](https://cve.now/CVE-2026-68993.md): A double free vulnerability in NPU driver due to improper pointer management (940) (CVSS 6.3) - [CVE-2026-68994](https://cve.now/CVE-2026-68994.md): A double free vulnerability in NPU driver due to improper pointer management (941) (CVSS 7.3) - [CVE-2026-48183](https://cve.now/CVE-2026-48183.md): Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions (CVSS 9.1) - [CVE-2026-68984](https://cve.now/CVE-2026-68984.md): In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption. (CVSS 8.1) - [CVE-2026-69005](https://cve.now/CVE-2026-69005.md): Integer overflow in NPU driver parameter processing due to insufficient bounds checking. (CVSS 7.3) - [CVE-2026-68985](https://cve.now/CVE-2026-68985.md): In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes… (CVSS 7.5) - [CVE-2026-69006](https://cve.now/CVE-2026-69006.md): Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption. (CVSS 9.1) - [CVE-2026-69068](https://cve.now/CVE-2026-69068.md): Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory. (CVSS 9.1) - [CVE-2026-69025](https://cve.now/CVE-2026-69025.md): In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial… (CVSS 7.5) - [CVE-2026-68990](https://cve.now/CVE-2026-68990.md): In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially… (CVSS 7.8) - [CVE-2026-68991](https://cve.now/CVE-2026-68991.md): In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to… (CVSS 9.8) - [CVE-2026-69002](https://cve.now/CVE-2026-69002.md): Incorrect authorization in Samsung framework services due to missing permission checks (CVSS 7.5) - [CVE-2026-69066](https://cve.now/CVE-2026-69066.md): Memory corruption in GPU driver due to improper validation of VMID reservation. (CVSS 8.4) - [CVE-2026-69050](https://cve.now/CVE-2026-69050.md): Out-of-bounds memory access in a device driver due to improper resource state tracking. (CVSS 9.8) - [CVE-2026-69043](https://cve.now/CVE-2026-69043.md): In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption (CVSS 9.1) - [CVE-2026-69044](https://cve.now/CVE-2026-69044.md): In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption. (CVSS 8.4) - [CVE-2025-66366](https://cve.now/CVE-2025-66366.md): Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash (CVSS 7.5) - [CVE-2026-33965](https://cve.now/CVE-2026-33965.md): An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow. (CVSS 5.3) - [CVE-2025-66367](https://cve.now/CVE-2025-66367.md): Improper handling of NAS DLTransport messages may lead to a baseband crash. (CVSS 7.5) - [CVE-2025-66368](https://cve.now/CVE-2025-66368.md): Incorrect handling of SDP payload leads to a Denial of Service (CVSS 7.5) - [CVE-2026-33958](https://cve.now/CVE-2026-33958.md): Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition. (CVSS 7.5) - [CVE-2026-33971](https://cve.now/CVE-2026-33971.md): In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service… (CVSS 9.8) - [CVE-2026-33969](https://cve.now/CVE-2026-33969.md): In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of… (CVSS 7.5) - [CVE-2026-33972](https://cve.now/CVE-2026-33972.md): In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation. (CVSS 9.8) - [CVE-2026-48179](https://cve.now/CVE-2026-48179.md): In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service (CVSS 7.5) - [CVE-2026-48176](https://cve.now/CVE-2026-48176.md): A memory corruption vulnerability caused by improper validation of messages (CVSS 7.5) - [CVE-2026-35495](https://cve.now/CVE-2026-35495.md): In IMS stack, improper handling of SIP packets leads to Incorrect\_Access\_Control vulnerability (CVSS 6.5) - [CVE-2025-66365](https://cve.now/CVE-2025-66365.md): Incorrect handling of SIP packets leads to baseband crashes (no CVSS) - [CVE-2025-66364](https://cve.now/CVE-2025-66364.md): Continuously sending control‑plane messages causes the baseband to crashes. (CVSS 7.5) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/vendors/samsung-semiconductor Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.