{"id":"CVE-2026-48178","aliases":[],"cve":{"records":[{"id":"CVE-2026-48178","source":"samsungsemiconductor","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-05-21T04:23:11.791Z","published":"2026-11-05T02:43:02.080Z","modified":"2026-11-10T13:31:42.336Z"}],"publishers":[{"name":"samsungsemiconductor","role":"CNA","organizationId":"a8bfbd5c-5645-475e-a8f4-6c140c17bd29","modified":"2026-11-05T02:43:02.080Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-10T13:31:42.336Z"}],"references":[{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/","tags":[],"source":"samsungsemiconductor"}],"weaknesses":[{"id":"CWE-413","description":"CWE-413","source":"samsungsemiconductor"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-10T13:28:05.344741Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Out of bound access in PPC due to race condition in global variable access","titleSource":"samsungsemiconductor","descriptionSource":"samsungsemiconductor","description":"Out of bound access in PPC due to race condition in global variable access","score":8.8,"severity":"high","published":"2026-11-05T02:43:02.080Z","modified":"2026-11-10T13:31:42.336Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Samsung Semiconductor","name":"Exynos 2200","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-48178"},{"vendor":"Samsung Semiconductor","name":"Exynos 2400","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-48178"},{"vendor":"Samsung Semiconductor","name":"Exynos 2500","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-48178"},{"vendor":"Samsung Semiconductor","name":"Exynos 2600","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-48178"}],"remediation":[],"references":["https://semiconductor.samsung.com/support/quality-support/product-security-updates/"],"sources":[{"name":"CVE","id":"CVE-2026-48178","modified":"2026-11-10T13:31:42.336Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-48178"}],"assessments":[{"source":"CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":8.8}],"sourceAffected":[],"observedAt":"2026-11-10T13:57:33.877Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T01:00:31.976Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-05T03:25:32.521Z","attemptedAt":"2026-11-05T03:25:32.521Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-05T03:25:32.512Z","attemptedAt":"2026-11-05T03:25:32.512Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-11-05T03:25:32.521Z","attemptedAt":"2026-11-05T03:25:32.521Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-05T03:25:32.520Z","attemptedAt":"2026-11-05T03:25:32.520Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-48178","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48178","modified":"2026-11-05T03:17:28.013","checkedAt":"2026-11-05T03:25:32.521Z"}],"aiSummary":{"text":"Samsung Semiconductor's Exynos 2200, 2400, 2500, and 2600 are affected by an out-of-bounds access vulnerability due to a race condition in global variable access, affecting versions prior to October 2026. The required attacker access is unclear. The stated impact is out-of-bounds access.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-10T14:01:52.002Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-48178"}]}}