CVE-2026-68991 In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.

CriticalCVSS 9.8 EPSS 0.29%

Published: 2026-11-05 04:40
Updated: 2026-11-10 16:17
Exploit status: No public exploit known

Description

In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corruption and lead to a denial of service condition.

Affected products

Product	Affected versions	Fixed in
Samsung Semiconductor Exynos 1480	< November 2026	November 2026
Samsung Semiconductor Exynos 2400	< November 2026	November 2026

References

semiconductor.samsung.com

CVSS v3.1

9.8 Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.29% (percentile 21.8)
CWE: CWE-787

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.