CVE-2026-23786
published 2026-09-14CVE-2026-23786: An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A TOCTOU race condition in the…
PriorityP410low2.8CVSS 3.1
AVLACHPRLUINSCCNINAL
EPSS
0.08%
0.2th percentile
An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A TOCTOU race condition in the Exynos DRM HDR Driver leads to a heap overflow, causing a kernel crash.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| samsung | exynos_1280_firmware | <= 2025-12-24 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600.
ghsa_unreviewed·2026-09-14
CVE-2026-23786 [LOW] CWE-367 An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600.
An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A TOCTOU race condition in the Exynos DRM HDR Driver leads to a heap overflow, causing a kernel crash.
VulDB
Samsung Exynos Exynos DRM HDR Driver toctou
vuldb·2026-09-14·CVSS 2.8
CVE-2026-23786 [LOW] Samsung Exynos Exynos DRM HDR Driver toctou
A vulnerability was found in Samsung Exynos and classified as critical. Affected is an unknown function of the component Exynos DRM HDR Driver. Such manipulation leads to time-of-check time-of-use.
This vulnerability is listed as CVE-2026-23786. The attack must be carried out locally. There is no available exploit.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-14
Published