CVE-2026-33967
Received Received - Intake

Out-of-Bounds Array Access in Samsung Mobile Processor Camera Driver

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: MITRE

Description
An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, an out-of-bounds array access vulnerability in the error-handling path leads to memory corruption.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-14
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-33967
EUVD
EUVD-2026-77172

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
samsung exynos_camera_driver From 1330 (inc) to 2400 (inc)
samsung exynos_camera_driver From 1580 (inc) to 2600 (inc)
samsung exynos_camera_driver From 1680 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a medium-severity vulnerability in Samsung's Exynos Camera Driver. It involves an out-of-bounds array access in the error-handling path, which can lead to memory corruption. The issue affects multiple Exynos chipsets including models 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680.

Impact Analysis

The vulnerability could allow an attacker with local access to cause memory corruption in the camera system of affected devices. This might lead to crashes, instability, or potential unauthorized access to sensitive data processed by the camera.

Mitigation Strategies

Apply the latest security patches provided by Samsung for the affected Exynos chipsets. Check Samsung's official support page for updates and install them immediately to prevent potential memory corruption.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-33967. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart