CVE-2026-68994

HighCVSS 7.3/10Last modified Nov 10, 2026

Description

A double free vulnerability in NPU driver due to improper pointer management (941)

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-415

Affected software

VendorProductVersions
Samsung SemiconductorExynos 1480< November 2026
Samsung SemiconductorExynos 2400< November 2026
Samsung SemiconductorExynos 1580< November 2026
Samsung SemiconductorExynos 2500< November 2026

References

Timeline

Published
Nov 5, 2026
Last modified
Nov 10, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-69007.4Improper certificate validation vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P5.CVE-2026-690027.5Incorrect authorization in Samsung framework services due to missing permission checksCVE-2026-690057.3Integer overflow in NPU driver parameter processing due to insufficient bounds checking.CVE-2026-690069.1Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.CVE-2026-69017.7Untrusted Search Path vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P5.CVE-2026-69027.7A Remote Code Execution vulnerability in P4 (Helix Core) Server's Command-Line Client, prior to the 2025.2 Patch 2, has been fixed to addresCVE-2026-690257.5In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial oCVE-2026-69037.5The LabOne Web Server, backing the LabOne User Interface, contains insufficient input validation in its file access functionality. An unauthCVE-2026-690439.1In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruptionCVE-2026-690448.4In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.CVE-2026-690509.8Out-of-bounds memory access in a device driver due to improper resource state tracking.CVE-2026-690668.4Memory corruption in GPU driver due to improper validation of VMID reservation.
CVE-2026-68994: High severity, CVSS 7.3 | Vulnix