CVE-2026-33964: Samsung Exynos 1580 Firmware

Medium severity, CVSS 6.4. EPSS: 0.1% chance of exploitation in the next 30 days.

An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to the camera driver, causing limited information disclosure or denial of service.

Affected products

• Samsung Exynos 1580 Firmware: up to and including 2025-12-29

Published 2026-09-14. Last modified 2026-09-22.