Double Free Vulnerability in NPU Driver by Samsung
CVE-2026-68994

Currently unrated

Key Information:

Vendor: Samsung Semiconductor
Status: Exynos 1480; Exynos 2400; Exynos 1580; Exynos 2500
Vendor: CVE Published:; 5 November 2026

🔔 Create Samsung Semiconductor Vulnerability Alert

What is CVE-2026-68994?

A double free vulnerability has been identified in the NPU driver due to improper pointer management. This flaw could lead to potential exploitation, allowing attackers to manipulate memory allocation and potentially execute arbitrary code. It is essential for users and administrators to stay updated with security patches released by Samsung to mitigate risks associated with this vulnerability.

Affected Version(s)

Exynos 1480 0

Exynos 1580 0

Exynos 2400 0

References

https://semiconductor.samsung.com/support/quality-support...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 5, 2026
Vulnerability Reserved
Aug 3, 2026

CVE-2026-68994 Data

JSON