CVE-2026-69006 Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.
CriticalCVSS 9.1
- Published
- Updated
- Exploit status
- No public exploit known
Description
Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Semiconductor Exynos 850 | < November 2026 | November 2026 |
| Samsung Semiconductor Exynos 2100 | < November 2026 | November 2026 |
| Samsung Semiconductor Exynos 1280 | < November 2026 | November 2026 |
| Samsung Semiconductor Exynos 2200 | < November 2026 | November 2026 |
| Samsung Semiconductor Exynos 1330 | < November 2026 | November 2026 |
| Samsung Semiconductor Exynos 1380 | < November 2026 | November 2026 |
| Samsung Semiconductor Exynos 1480 | < November 2026 | November 2026 |
| Samsung Semiconductor Exynos 2400 | < November 2026 | November 2026 |
| Samsung Semiconductor Exynos 1580 | < November 2026 | November 2026 |
| Samsung Semiconductor Exynos 2500 | < November 2026 | November 2026 |
| Samsung Semiconductor Exynos 1680 | < November 2026 | November 2026 |
| Samsung Semiconductor Exynos W920 | < November 2026 | November 2026 |
| Samsung Semiconductor Exynos W930 | < November 2026 | November 2026 |
| Samsung Semiconductor Exynos W1000 | < November 2026 | November 2026 |
| Samsung Semiconductor Exynos Modem 5410 | < November 2026 | November 2026 |