CVE-2026-33967

Awaiting Analysis Awaiting Analysis - Queue

Out-of-Bounds Array Access in Samsung Mobile Processor Camera Driver

Publication date: 2026-09-14

Last updated on: 2026-09-22

Assigner: MITRE

Description

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, an out-of-bounds array access vulnerability in the error-handling path leads to memory corruption.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-22

Generated

2026-10-04

AI Q&A

2026-09-14

EPSS Evaluated

2026-10-03

NVD

CVE-2026-33967

EUVD

EUVD-2026-77172

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	exynos_camera_driver	From 1330 (inc) to 2400 (inc)
samsung	exynos_camera_driver	From 1580 (inc) to 2600 (inc)
samsung	exynos_camera_driver	From 1680 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is a medium-severity vulnerability in Samsung's Exynos Camera Driver. It involves an out-of-bounds array access in the error-handling path, which can lead to memory corruption. The issue affects multiple Exynos chipsets including models 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680.

Detection Guidance

Detection of this vulnerability requires checking the Samsung Exynos camera driver version on affected devices. Use device management tools or firmware checks to verify if the camera driver is running on vulnerable Exynos chipsets (1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680). No specific commands are provided in the context.

Impact Analysis

The vulnerability could allow an attacker with local access to cause memory corruption in the camera system of affected devices. This might lead to crashes, instability, or potential unauthorized access to sensitive data processed by the camera.

Compliance Impact

The vulnerability involves memory corruption due to out-of-bounds array access in the camera driver, which could potentially lead to unauthorized access or data leaks. This may impact compliance with GDPR if personal data is exposed, and HIPAA if health-related data is compromised. However, the provided context does not specify direct compliance implications.

Mitigation Strategies

Apply the latest security patches provided by Samsung for the affected Exynos chipsets. Check Samsung's official support page for updates and install them immediately to prevent potential memory corruption.

Hi! I’m here to help you understand CVE-2026-33967. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70