CVE-2026-69025
Received Received - Intake

Out-of-Bounds Write in Exynos NPU Driver

Publication date: 2026-11-05

Last updated on: 2026-11-05

Assigner: a8bfbd5c-5645-475e-a8f4-6c140c17bd29

Description
In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-05
Last Modified
2026-11-05
Generated
2026-11-05
AI Q&A
2026-11-05
EPSS Evaluated
N/A
NVD
CVE-2026-69025
EUVD
EUVD-2026-117286

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
Samsung Semiconductor Exynos 1480 0
Samsung Semiconductor Exynos 2400 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Exynos NPU driver where improper validation of user input in the ioctl handler allows an out-of-bounds write. This can cause a denial of service by crashing the system or disrupting normal operations.

Impact Analysis

The vulnerability could lead to system crashes or instability, potentially causing data loss or service disruption if exploited. It may affect devices using Exynos 1480 or Exynos 2400 NPUs.

Mitigation Strategies

Apply the latest security patches from Samsung for the Exynos NPU driver to fix the improper input validation issue. Disable or restrict access to the vulnerable ioctl handler if patches are unavailable. Monitor vendor advisories for updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-69025. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...