CVE-2026-33968
LowCVSS 2.8Summary
In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 processors, a Time-of-Check Time-of-Use (TOCTOU) race condition leads to out-of-bounds access.
Risk Assessment
This may allow an attacker to read or modify memory outside the allowed range, risking data exposure or system instability on the device.
Recommendation
Apply the firmware or camera driver update provided by the vendor for the affected Exynos models.
Other vulnerabilities in Samsung Exynos camera driver
See all- CVE-2026-33967Low
In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 processors, an out-of-bounds array access vulnerability in the error-handling path leads to memory corruption.
- CVE-2026-33966Low
In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 processors, an information leak occurs due to insertion of sensitive information into debugging code.
- CVE-2026-33956Low
In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, and 2500 processors, sending a malformed message to the test_msg sysfs entry causes an out-of-bounds write, leading to a denial of service.
Original NVD description (English source)
An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, a Time-of-Check Time-of-Use (TOCTOU) race condition leads to out-of-bounds access.