CVE-2026-68985

Full vulnerability record from the local CVENow database.

Description

In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

a8bfbd5c-5645-475e-a8f4-6c140c17bd29

Published

2026-11-05 03:17:31.263000

Last modified

2026-11-05 03:17:31.263000

View original CVE JSON

{
  "id": "CVE-2026-68985",
  "sourceIdentifier": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
  "published": "2026-11-05T03:17:31.263",
  "lastModified": "2026-11-05T03:17:31.263",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service."
    }
  ],
  "affected": [
    {
      "source": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
      "affectedData": [
        {
          "vendor": "Samsung Semiconductor",
          "product": "Exynos 1280",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThan": "November 2026",
              "versionType": "date",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Samsung Semiconductor",
          "product": "Exynos 2200",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThan": "November 2026",
              "versionType": "date",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Samsung Semiconductor",
          "product": "Exynos 1380",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThan": "November 2026",
              "versionType": "date",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "weaknesses": [
    {
      "source": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
      "source": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29"
    }
  ]
}