CVE-2026-33956
LowCVSS 2.8Summary
In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, and 2500 processors, sending a malformed message to the test_msg sysfs entry causes an out-of-bounds write, leading to a denial of service.
Risk Assessment
This may allow an attacker to crash or hang the device, leading to a denial of service.
Recommendation
Apply the firmware or camera driver update provided by the vendor for the affected Exynos models.
Other vulnerabilities in Samsung Exynos camera driver
See all- CVE-2026-33968Low
In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 processors, a Time-of-Check Time-of-Use (TOCTOU) race condition leads to out-of-bounds access.
- CVE-2026-33967Low
In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 processors, an out-of-bounds array access vulnerability in the error-handling path leads to memory corruption.
- CVE-2026-33966Low
In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 processors, an information leak occurs due to insertion of sensitive information into debugging code.
Original NVD description (English source)
An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Sending a malformed message to the test_msg sysfs entry causes an out-of-bounds write, leading to denial of service.