CVE-2026-33967
LowCVSS 2.8Summary
In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 processors, an out-of-bounds array access vulnerability in the error-handling path leads to memory corruption.
Risk Assessment
Memory corruption may allow an attacker to execute unauthorized code or cause a device crash.
Recommendation
Update the firmware or camera driver to the vendor-patched version for the affected Exynos models.
Other vulnerabilities in Samsung Exynos camera driver
See all- CVE-2026-33968Low
In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 processors, a Time-of-Check Time-of-Use (TOCTOU) race condition leads to out-of-bounds access.
- CVE-2026-33966Low
In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 processors, an information leak occurs due to insertion of sensitive information into debugging code.
- CVE-2026-33956Low
In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, and 2500 processors, sending a malformed message to the test_msg sysfs entry causes an out-of-bounds write, leading to a denial of service.
Original NVD description (English source)
An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, an out-of-bounds array access vulnerability in the error-handling path leads to memory corruption.