Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-68991: Samsung Exynos 1480/2400 can crash from malformed requests

CVE-2026-68991 · published today
Summary

The neural network component in Samsung Exynos 1480 and 2400 chips does not properly check incoming data, which can corrupt memory and cause the device to stop working. This can lead to a denial of service, meaning the affected device may become unresponsive. Apply the latest firmware or security update from Samsung that fixes this validation issue.

What to do
  • Update samsung semiconductor exynos 1480 to version November 2026 or later.
  • Update samsung semiconductor exynos 2400 to version November 2026 or later.
Affected software
VendorProductAffected versions
samsung semiconductor exynos 1480 < November 2026
samsung semiconductor exynos 2400 < November 2026
Original advisory text
In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.
In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.
Type
CWE-787Out-of-bounds Write
Timeline
Published5 Nov 2026
Updated5 Nov 2026
First seen5 Nov 2026
Sources
CVE-2026-68991 · MITRE
Track software like this
Free during beta