CVE-2026-69068
Received Received - Intake

Memory Corruption in GNSS Firmware Loader

Publication date: 2026-11-05

Last updated on: 2026-11-05

Assigner: a8bfbd5c-5645-475e-a8f4-6c140c17bd29

Description
Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-05
Last Modified
2026-11-05
Generated
2026-11-05
AI Q&A
2026-11-05
EPSS Evaluated
N/A
NVD
CVE-2026-69068
EUVD
EUVD-2026-117287

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
Samsung Semiconductor Exynos Modem 5300 0
Samsung Semiconductor Exynos Modem 5400 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves insufficient length validation in the GNSS firmware loader, which could allow corruption of kernel memory. This means the system may not properly check data sizes before processing, potentially leading to memory corruption.

Impact Analysis

This vulnerability could cause system instability, crashes, or unexpected behavior due to corrupted kernel memory. It may also enable privilege escalation or denial-of-service attacks if exploited.

Mitigation Strategies

Update the GNSS firmware loader to the latest version to ensure proper length validation and prevent kernel memory corruption. Disable the affected Samsung Exynos Modem 5300 or 5400 if possible until the update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-69068. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...