Skip to content

CVE-2026-68985

In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.

This table summarizes key information about the CVE-2026-68985, including its identifier, title, affected products, versions, severity, reporting date, patched versions, and acknowledgement status.
Category Content
CVE ID CVE-2026-68985
Description In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.
Affected Product Exynos 1280, 2200, 1380
Affected Component NPU
Severity Medium
Reported Date 2026-05-18
Acknowledgment Isouma