CVE-2026-69043

CriticalCVSS 9.1/10Last modified Nov 10, 2026

Description

In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
Samsung SemiconductorExynos 2200< October 2026
Samsung SemiconductorExynos 1480< October 2026
Samsung SemiconductorExynos 2400< October 2026
Samsung SemiconductorExynos 1580< October 2026
Samsung SemiconductorExynos 2500< October 2026
Samsung SemiconductorExynos 2600< October 2026
Samsung SemiconductorExynos 1680< October 2026

References

Timeline

Published
Nov 5, 2026
Last modified
Nov 10, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-690448.4In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.CVE-2026-690509.8Out-of-bounds memory access in a device driver due to improper resource state tracking.CVE-2026-690668.4Memory corruption in GPU driver due to improper validation of VMID reservation.CVE-2026-690689.1Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.CVE-2026-69075.3An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. `django.middleware.cache.UpdateCacheMiddleware` erroneously caches requesCVE-2026-690756.9FlowIntel is affected by a stored cross-site scripting vulnerability through multiple user-controlled or administrator-controlled fields. PCVE-2026-690767.5Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed CVE-2026-690777.5Exposure of unauthorized cross-project job manipulation vulnerability in Apache Kylin. Impact most to the kylin services that are directly eCVE-2026-690788.8CTI-Transmute is affected by a server-side request forgery vulnerability in the evaluation report PDF-generation functionality. User-controCVE-2026-690798.7CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity_timeline endpoint. The endpoint aCVE-2026-690807.5Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4.CVE-2026-690828.8CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functionality. The /account/delete/<i
CVE-2026-69043: Critical severity, CVSS 9.1 | Vulnix