Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-33964

Quick assessment

Affected
Samsung Exynos 1580 firmware
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在三星移动处理器 Exynos 1580 和 2500 的相机模块中发现了一个问题。当向相机驱动程序发送格式错误的消息时，会发生不可信指针引用（untrusted pointer dereference），导致有限的信息泄露或服务拒绝（DoS）。

CVSS 6.4 · Medium

Possible ATT&CK Techniques 1 AI

T1201 · Password Policy Discovery
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-33964

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to the camera driver, causing limited information disclosure or denial of service.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
非可信指针解引用
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Samsung Exynos 1580 firmware 0 ~ 2025-12-29 -

II. Public POCs for CVE-2026-33964

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-33964

请登录查看更多情报信息。

Vendor Pages for CVE-2026-33964 (1)

Same Patch Batch · Samsung · 2026-09-14 · 19 CVEs total

CVE-2026-23789 7.8 HIGH 三星Exynos MFC编码器double-free漏洞
CVE-2026-33963 7.5 HIGH 三星Exynos芯片组摄像头栈缓冲区溢出致拒绝服务
CVE-2026-23787 4.2 MEDIUM 三星Exynos多款芯片DRM驱动UAF致内核崩溃
CVE-2026-23788 4.2 MEDIUM Exynos DPU堆溢出致系统崩溃
CVE-2026-23791 4.2 MEDIUM 三星Exynos DPU驱动越界写致内核损坏
CVE-2026-23790 4.2 MEDIUM 三星Exynos DPU双释放导致内核内存损坏
CVE-2026-33957 4.2 MEDIUM 三星 Exynos 1580 驱动越界读写漏洞
CVE-2026-23792 4.0 MEDIUM 三星Exynos基带RRC未认证消息处理缺陷
CVE-2026-23793 3.5 LOW 三星Exynos系列芯片摄像头驱动越界访问致内核内存损坏
CVE-2026-33970 3.5 LOW 三星Exynos 5G基带RRC空指针解引用
CVE-2026-33962 2.8 LOW Exynos多型号Wi-Fi Netlink命令越界读
CVE-2026-23786 2.8 LOW Exynos处理器DRM驱动TOCTOU竞态致内核崩溃
CVE-2026-33960 2.8 LOW Exynos系列Wi-Fi驱动越界写致拒绝服务
CVE-2026-33967 2.8 LOW Exynos系列处理器相机驱动越界访问致内存损坏
CVE-2026-33968 2.8 LOW 三星Exynos系列处理器Camera驱动TOCTOU越界
CVE-2026-33956 2.8 LOW 三星Exynos芯片相机模块越界写导致服务中断
CVE-2026-33966 2.8 LOW 三星Exynos 1330等芯片Camera驱动信息泄露
CVE-2023-37366 2.8 LOW Google Pixel 安全漏洞

IV. Related Vulnerabilities

Same product: Exynos 1580 firmware
Same vendor: Samsung
Same weakness: CWE-822

V. Comments for CVE-2026-33964

No comments yet

Leave a comment