CVE-2026-33963

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. A stack-based buffer overflow occurs when a malformed message is sent to the camera driver, causing a denial of service...

CVE-2026-33964

An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to the camera driver, causing limited information disclosure or denial of service...

CVE-2026-33967

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, an out-of-bounds array access vulnerability in the error-handling path leads to memory corruption...

CVE-2026-23789

An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC encoder driver due to improper cleanup of dmabuf references...

CVE-2026-23790

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vulnerability in the Samsung Exynos DPU driver due to improper pointer management during DMA buffer reallocation leads to kernel memory corruption and a...

CVE-2026-33956

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Sending a malformed message to the testmsg sysfs entry causes an out-of-bounds write, leading to denial of service...

CVE-2026-33960

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl command to the Wi-Fi interface device can lead to improper buffer size allocation, resulting in an out-of-bounds write and causing a denial of...

CVE-2026-23789

CVE-2026-23789 is a double-free vulnerability in the Exynos MFC encoder driver across Samsung Mobile and Wearable Processors (Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, W1000). The root cause is improper cleanup of dma_buf references during err...

CVE-2026-33968

CVE-2026-33968 affects the camera driver in multiple Samsung Mobile Processor Exynos variants (1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680). The root cause is a Time-of-Check Time-of-Use (TOCTOU) race condition that leads to an out-of-bounds access . The CVSS 3.1 score is 2.8 (LOW) , with loca...

EUVD-2026-77162

An issue was discovered in Wi-Fi in Samsung Mobile Processor Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930. A malformed Netlink command can trigger an out-of-bounds read, potentially leading to information leakage...

CVE-2026-23786

A TOCTOU race condition in the Exynos DRM HDR Driver (within the DPU) of Samsung Mobile Processors Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600 leads to a heap overflow , resulting in a kernel crash . The CVSS 3.1 score is 2.8 (Low) , with a local attack vector, high complexity...

EUVD-2026-77153

An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC encoder driver due to improper cleanup of dmabuf references...

PT-2026-91020

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl command to the Wi-Fi interface device can lead to improper buffer size allocation, resulting in an out-of-bounds write and causing a denial of...

CVE-2026-23788

A heap overflow in the Exynos DRM HDR driver of Samsung Mobile Processors Exynos 1280, 2200, and 1380 (DPU) can lead to kernel memory corruption and a system crash . The root cause is improper buffer size validation. The CVSS 3.1 score is 4.2 (MEDIUM) , reflecting a local attack vector with high ...

CVE-2026-23792

A vulnerability in the NR RRC (New Radio Radio Resource Control) component of Samsung Mobile Processors and Modems allows an attacker to crash the baseband by sending unauthenticated downlink RRC Setup messages that are incorrectly handled. Affected chips include Exynos 1080, 2100, 1280, 2200, 13...

EUVD-2026-77156

An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, Modem 5400, and Modem 5410. Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash...

EUVD-2026-77174

An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, W920, W930, W1000, and Modem 5410. In the 5G baseband, a NULL Pointer Dereference occurs when processing a malformed RR...

EUVD-2023-60665

An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9810, Exynos 9610, Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos Modem 5123, Exynos Modem 5300, ...

CVE-2026-33966

An information leak vulnerability exists in the camera driver of Samsung Mobile Processor Exynos chips (models 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680). The root cause is the insertion of sensitive information into debugging code , potentially exposing data to a local attacker with low...

CVE-2026-33967

Samsung Exynos mobile processors (1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680) contain an out-of-bounds array access in the camera driver's error-handling path , leading to memory corruption . The CVSS 3.1 score is 2.8 (LOW) with a local attack vector, high complexity, and only a low avail...