Samsung Semiconductor Exynos 2200

• CVE-2026-48173 Unrated In the NAS message handler, improper validation of the length field in NAS message causes memory corruption 0.1%
• CVE-2026-48174 Unrated In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition. 0.2%
• CVE-2026-35494 Unrated In the baseband, memory corruption during NAS packet processing can cause a denial of service. 0.1%
• CVE-2026-48178 Unrated Out of bound access in PPC due to race condition in global variable access 0.1%
• CVE-2026-48186 Unrated Improper handling of messages before AS security activation can cause unexpected behavior 0.1%
• CVE-2026-68984 Unrated In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption. 0.1%
• CVE-2026-68985 Unrated In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service. 0.1%
• CVE-2026-69006 Unrated Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption. 0.1%
• CVE-2026-69066 Unrated Memory corruption in GPU driver due to improper validation of VMID reservation. 0.1%
• CVE-2026-69043 Unrated In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption 0.1%
• CVE-2025-66367 Unrated Improper handling of NAS DLTransport messages may lead to a baseband crash. 0.1%
• CVE-2026-33958 Unrated Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition. 0.1%
• CVE-2026-33971 Unrated In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition. 0.2%
• CVE-2026-33969 Unrated In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service. 0.2%
• CVE-2025-66364 Unrated Continuously sending control‑plane messages causes the baseband to crashes. 0.1%