{"id":"CVE-2026-68984","kind":"vulnerability","aliases":["CVE-2026-68984"],"related":[],"title":"Samsung Exynos NPU kernel driver: integer overflow lets apps corrupt memory","description":"In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.","summary":"An integer overflow in the Samsung Exynos NPU kernel driver lets an unprivileged application trigger memory corruption. Memory corruption in the kernel can typically be turned into privilege escalation, though the sources do not say that here.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","exynos","infrastructure","samsung"],"not_affected_if":["unknown"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-05T03:17:31+00:00","first_seen_at":"2026-11-05T03:31:44+00:00","triaged_at":"2026-11-05T03:33:42+00:00","updated_at":"2026-11-05T03:33:42+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-05T03:33:42Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Samsung Exynos NPU kernel driver: integer overflow lets apps corrupt memory","impact":"high","summary":"An integer overflow in the Samsung Exynos NPU kernel driver lets an unprivileged application trigger memory corruption. Memory corruption in the kernel can typically be turned into privilege escalation, though the sources do not say that here.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["samsung","android","exynos"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Local app corrupts kernel memory, possibly gaining elevated privileges","analyst_note":"Find the Samsung security bulletin for this CVE to get affected models, patch level and fixed version; check the NVD page https://nvd.nist.gov/vuln/detail/CVE-2026-68984.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Affects Samsung devices with an Exynos chip whose kernel includes the NPU driver; the sources do not list affected models or versions. Devices from other chip makers are not described as affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000649,"input_tokens":4165,"output_tokens":465,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-68984':14A,17A 'allow':67C 'android':18B 'app':9A 'applic':35B,70C 'corrupt':10A,38B,40B,74C 'cve':12A,15A 'driver':5A,31B,63C 'escal':50B 'exyno':2A,19B,28B,60C 'infrastructur':20B 'integ':6A,23B,65C 'kernel':4A,30B,43B,62C 'let':8A,32B 'memori':11A,37B,39B,73C 'npu':3A,29B,61C 'overflow':7A,24B,66C 'privileg':49B 'samsung':1A,21B,27B,59C 'say':56B 'sourc':53B 'though':51B 'trigger':36B,72C 'turn':47B 'typic':45B 'unprivileg':34B,69C","nicknames":[],"mitigations":[],"who_affected":"Affects Samsung devices with an Exynos chip whose kernel includes the NPU driver; the sources do not list affected models or versions. Devices from other chip makers are not described as affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["android","exynos","infrastructure","samsung","unknown"],"campaign_type":null,"first_public_at":"2026-11-05T03:17:31+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-68984","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68984","severity":null,"published_at":"2026-11-05T03:17:31+00:00","modified_at":"2026-11-05T03:17:31+00:00","first_seen_at":"2026-11-05T03:31:44+00:00","fetched_at":"2026-11-05T03:31:44+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}