Exynos 1580/2500 Camera Driver Pointer Deref - Info Disclosure/DoS
CVE-2026-33964 Published on September 14, 2026

An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to the camera driver, causing limited information disclosure or denial of service.

NVD

Vulnerability Analysis

CVE-2026-33964 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity, and a high impact on availability.

Attack Vector:
LOCAL
Attack Complexity:
HIGH
Privileges Required:
LOW
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
LOW
Integrity Impact:
NONE
Availability Impact:
HIGH

Weakness Type

Untrusted Pointer Dereference

The program obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.


Products Associated with CVE-2026-33964

Want to know whenever a new CVE is published for Samsung Exynos 1580 Firmware? stack.watch will email you.

 

Affected Versions

Samsung Exynos 1580 firmware: