What is CVE-2026-33964?

CVE-2026-33964 is a medium-severity vulnerability in Samsung Exynos 1580 Firmware, classified under Untrusted Pointer Dereference. CVSS score: 6.4/10. Published 2026-09-14.

How severe is CVE-2026-33964?

Medium severity. CVSS v3 base score is 6.4 out of 10.

Vulnerability in Samsung Exynos 1580 Firmware

CVE-2026-33964

An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to the camera driver, causing limited information disclosure or denial of service.

EPSS: 0.001 (0.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.4 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:H.

Affected products

Samsung Exynos 1580 Firmware

Weakness classification (CWE)

CWE-822 — Untrusted Pointer Dereference

References

cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2026-33964?: CVE-2026-33964 is a medium-severity vulnerability in Samsung Exynos 1580 Firmware, classified under Untrusted Pointer Dereference. CVSS score: 6.4/10. Published 2026-09-14.
How severe is CVE-2026-33964?: Medium severity. CVSS v3 base score is 6.4 out of 10.