CVE-2026-23786

Awaiting Analysis Awaiting Analysis - Queue

Heap Overflow in Exynos DRM HDR Driver

Publication date: 2026-09-14

Last updated on: 2026-09-22

Assigner: MITRE

Description

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A TOCTOU race condition in the Exynos DRM HDR Driver leads to a heap overflow, causing a kernel crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-22

Generated

2026-10-05

AI Q&A

2026-09-14

EPSS Evaluated

2026-10-04

NVD

CVE-2026-23786

EUVD

EUVD-2026-77142

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	exynos	1280
samsung	exynos	2200
samsung	exynos	1380
samsung	exynos	1480
samsung	exynos	2400
samsung	exynos	1580
samsung	exynos	2500
samsung	exynos	1680
samsung	exynos	2600

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-367	The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

Attack-Flow Graph

Executive Summary

This vulnerability is a race condition in the Exynos DRM HDR Driver of Samsung Mobile Processors. It leads to a heap overflow, which can cause a kernel crash and system instability.

Detection Guidance

Detection requires checking for the affected Samsung Exynos SoC models and verifying if the Exynos DRM HDR Driver is running. Use commands like 'uname -a' to check kernel version and 'lsmod | grep exynos_drm' to see if the driver is loaded. Check system logs for kernel crashes or memory errors.

Impact Analysis

The vulnerability may cause system instability or crashes due to memory access errors. It requires local access and has a low impact on confidentiality, integrity, and availability.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with standards like GDPR or HIPAA. The vulnerability causes a kernel crash due to a heap overflow in the Exynos DRM HDR Driver, which could lead to system instability but does not explicitly mention data exposure or privacy violations.

Mitigation Strategies

Apply security updates from Samsung for affected Exynos SoC models. Monitor vendor advisories for patched versions and update the Display Processing Unit (DPU) driver immediately.

Hi! I’m here to help you understand CVE-2026-23786. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70