CVE-2023-40218: Samsung Exynos 1280 Firmware

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue was discovered in the NPU kernel driver in Samsung Exynos Mobile Processor 9820, 980, 2100, 2200, 1280, and 1380. An integer overflow can bypass detection of error cases via a crafted application.

Affected products

• Samsung Exynos 1280 Firmware: affected versions not specified
• Samsung Exynos 1380 Firmware: affected versions not specified
• Samsung Exynos 2100 Firmware: affected versions not specified
• Samsung Exynos 2200 Firmware: affected versions not specified
• Samsung Exynos 980 Firmware: affected versions not specified
• Samsung Exynos 9820 Firmware: affected versions not specified

Published 2023-09-12. Last modified 2026-06-17.