Out-of-Bounds Write Vulnerability in Exynos NPU Driver by Samsung

CVE-2026-69025

What is CVE-2026-69025?

The Exynos NPU driver contains a vulnerability due to inadequate validation of user inputs in its ioctl handler. This flaw can lead to an out-of-bounds write, which may disrupt normal operation and result in a denial of service for the affected devices. Users of Samsung Exynos devices are advised to be aware of this vulnerability and apply relevant updates as necessary.

References