CVE-2026-33960
LowCVSS 2.8Summary
In Samsung Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000 processors, a malformed ioctl command to the Wi-Fi interface device can lead to improper buffer size allocation, resulting in an out-of-bounds write and causing a denial of service (DoS).
Risk Assessment
This may allow an attacker to crash or hang the device, leading to a denial of service.
Recommendation
Apply the firmware or Wi-Fi driver update from the vendor for the affected Exynos models.
Other vulnerabilities in Samsung Exynos Wi-Fi driver
See all- CVE-2026-33962Low
In the Wi-Fi module of Samsung Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930 processors, a malformed Netlink command can trigger an out-of-bounds read, potentially leading to information leakage.
- CVE-2025-54601High
A synchronization issue in the Wi-Fi driver of Samsung Exynos and Wearable processors leads to a double-free vulnerability. An attacker can trigger a race condition by concurrently invoking the ioctl function from multiple threads.
- CVE-2025-54602High
A synchronization issue in the Wi-Fi driver of Samsung Exynos processors leads to a use-after-free vulnerability. An attacker can trigger a race condition by concurrently invoking the ioctl function from multiple threads.
Original NVD description (English source)
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl command to the Wi-Fi interface device can lead to improper buffer size allocation, resulting in an out-of-bounds write and causing a denial of service (DoS).