CVE-2026-23789
Quick assessment
Affected
Samsung Exynos 850 firmware
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在三星 Exynos 移动处理器和可穿戴处理器（Exynos 850、1080、2100、1280、2200、1330、1380、1480、2400、1580、2500、2600、1680、W920、W930 和 W1000）的 MFC 中发现一个问题。Exynos MFC 编码器驱动中存在一个双重释放（double-free）漏洞（原因是在错误处理过程中对 dma_buf 引用进行了不恰当的清理），该漏洞会导致内核内存损坏，并可能引发任意代码执行。
Possible ATT&CK Techniques 2 AI
T1609 · Container Administration Command T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-23789
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC encoder driver (due to improper cleanup of dma_buf references during error handling) leads to kernel memory corruption and potential arbitrary code execution.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
双重释放
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Samsung | Exynos 850 firmware | 0 ~ 2025-12-23 | - |
|
II. Public POCs for CVE-2026-23789
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-23789
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-23789 (1)
Same Patch Batch · Samsung · 2026-09-14 · 19 CVEs total
| CVE-2026-33963 | 7.5 HIGH | 三星Exynos芯片组摄像头栈缓冲区溢出致拒绝服务 |
| CVE-2026-33964 | 6.4 MEDIUM | 三星Exynos 1580/2500相机模块指针解引用漏洞 |
| CVE-2026-23787 | 4.2 MEDIUM | 三星Exynos多款芯片DRM驱动UAF致内核崩溃 |
| CVE-2026-23788 | 4.2 MEDIUM | Exynos DPU堆溢出致系统崩溃 |
| CVE-2026-23791 | 4.2 MEDIUM | 三星Exynos DPU驱动越界写致内核损坏 |
| CVE-2026-23790 | 4.2 MEDIUM | 三星Exynos DPU双释放导致内核内存损坏 |
| CVE-2026-33957 | 4.2 MEDIUM | 三星 Exynos 1580 驱动越界读写漏洞 |
| CVE-2026-23792 | 4.0 MEDIUM | 三星Exynos基带RRC未认证消息处理缺陷 |
| CVE-2026-23793 | 3.5 LOW | 三星Exynos系列芯片摄像头驱动越界访问致内核内存损坏 |
| CVE-2026-33970 | 3.5 LOW | 三星Exynos 5G基带RRC空指针解引用 |
| CVE-2023-37366 | 2.8 LOW | Google Pixel 安全漏洞 |
| CVE-2026-23786 | 2.8 LOW | Exynos处理器DRM驱动TOCTOU竞态致内核崩溃 |
| CVE-2026-33966 | 2.8 LOW | 三星Exynos 1330等芯片Camera驱动信息泄露 |
| CVE-2026-33968 | 2.8 LOW | 三星Exynos系列处理器Camera驱动TOCTOU越界 |
| CVE-2026-33967 | 2.8 LOW | Exynos系列处理器相机驱动越界访问致内存损坏 |
| CVE-2026-33960 | 2.8 LOW | Exynos系列Wi-Fi驱动越界写致拒绝服务 |
| CVE-2026-33962 | 2.8 LOW | Exynos多型号Wi-Fi Netlink命令越界读 |
| CVE-2026-33956 | 2.8 LOW | 三星Exynos芯片相机模块越界写导致服务中断 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-23789
No comments yet