7.8
High
CVE-2026-23789 An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200,…
Description
An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC encoder driver (due to improper cleanup of dma_buf references during error handling) leads to kernel memory corruption and potential arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Exynos 850 firmware 2025 | earliest → 2025-12-23 | No fix stated |
Other CVEs of Exynos 850 firmware
The 4 CVEs of Exynos 850 firmware →
CVE-2026-33962
An issue was discovered in Wi-Fi in Samsung Mobile Processor Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930
2.8
Low
CVE-2026-33970
An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080,…
3.5
Low
CVE-2023-37366
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9810, Exynos 9610,…
2.8
Low