CVE-2026-23790
published 2026-09-14CVE-2026-23790: An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vulnerability in the…
PriorityP418medium4.2CVSS 3.1
AVLACHPRLUINSCCNILAL
EPSS
0.09%
0.5th percentile
An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vulnerability in the Samsung Exynos DPU driver (due to improper pointer management during DMA buffer reallocation) leads to kernel memory corruption and a potential use-after-free.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| samsung | exynos_1280_firmware | <= 2025-12-29 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Samsung Exynos DPU double free
vuldb·2026-09-14
CVE-2026-23790 [LOW] Samsung Exynos DPU double free
A vulnerability identified as problematic has been detected in Samsung Exynos. This issue affects some unknown processing of the component DPU. This manipulation causes double free.
This vulnerability appears as CVE-2026-23790. The attack requires local access. There is no available exploit.
GHSA
An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600.
ghsa_unreviewed·2026-09-14
CVE-2026-23790 [MEDIUM] CWE-415 An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600.
An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vulnerability in the Samsung Exynos DPU driver (due to improper pointer management during DMA buffer reallocation) leads to kernel memory corruption and a potential use-after-free.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-14
Published