CVE-2026-68985
Received Received - Intake

Out-of-Bounds Write in Samsung Exynos NPU Driver

Publication date: 2026-11-05

Last updated on: 2026-11-05

Assigner: a8bfbd5c-5645-475e-a8f4-6c140c17bd29

Description
In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-05
Last Modified
2026-11-05
Generated
2026-11-05
AI Q&A
2026-11-05
EPSS Evaluated
N/A
NVD
CVE-2026-68985
EUVD
EUVD-2026-117289

Affected Vendors & Products

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Samsung Exynos NPU driver where improper validation of user input in the ioctl handler allows an out-of-bounds write. This can cause a denial of service by crashing the system or disrupting normal operations.

Impact Analysis

This vulnerability could allow an attacker to crash the device or cause instability by exploiting the out-of-bounds write in the NPU driver. This may lead to loss of functionality or require a reboot to restore normal operation.

Mitigation Strategies

Update the Samsung Exynos NPU driver to the latest patched version as soon as it becomes available. Disable or restrict access to the vulnerable ioctl handler if possible until a patch is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68985. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...