{"affected":[{"defaultStatus":"unaffected","product":"Exynos 1280","source":"CNA: samsungsemiconductor","vendor":"Samsung Semiconductor","versions":[{"lessThan":"November 2026","status":"affected","version":"0","versionType":"date"}]},{"defaultStatus":"unaffected","product":"Exynos 2200","source":"CNA: samsungsemiconductor","vendor":"Samsung Semiconductor","versions":[{"lessThan":"November 2026","status":"affected","version":"0","versionType":"date"}]},{"defaultStatus":"unaffected","product":"Exynos 1380","source":"CNA: samsungsemiconductor","vendor":"Samsung Semiconductor","versions":[{"lessThan":"November 2026","status":"affected","version":"0","versionType":"date"}]}],"cveId":"CVE-2026-68985","cwes":["CWE-787"],"description":"In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793846467681,"publishedAt":1793846467681,"references":[{"source":"CNA: samsungsemiconductor","tags":[],"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/"}],"remediation":[],"revision":"718b168097cc3854e52d4fe1f1671ac29945dce5a0b8e1e9e419fd7106ac81e2","sources":[{"modifiedAt":1793846467681,"name":"CNA: samsungsemiconductor","retrievedAt":1793848293678,"url":"https://www.cve.org/CVERecord?id=CVE-2026-68985"}],"ssvc":null,"status":"published","title":"CVE-2026-68985","updatedAt":1793848293678}