CVE-2026-33960
published 2026-09-14CVE-2026-33960: An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl…
PriorityP411low2.8CVSS 3.1
AVLACHPRLUINSCCNINAL
EPSS
0.12%
2.0th percentile
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl command to the Wi-Fi interface device can lead to improper buffer size allocation, resulting in an out-of-bounds write and causing a denial of service (DoS).
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| samsung | exynos_1330_firmware | <= 2025-12-18 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000.
ghsa_unreviewed·2026-09-14
CVE-2026-33960 [LOW] CWE-787 An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000.
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl command to the Wi-Fi interface device can lead to improper buffer size allocation, resulting in an out-of-bounds write and causing a denial of service (DoS).
VulDB
Samsung Exynos Wi-Fi Interface ioctl out-of-bounds write (EUVD-2026-77161)
vuldb·2026-09-14·CVSS 2.8
CVE-2026-33960 [LOW] Samsung Exynos Wi-Fi Interface ioctl out-of-bounds write (EUVD-2026-77161)
A vulnerability has been found in Samsung Exynos and classified as critical. Affected by this issue is the function ioctl of the component Wi-Fi Interface. Performing a manipulation results in out-of-bounds write.
This vulnerability is identified as CVE-2026-33960. The attack is only possible with local access. There is not any exploit available.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-14
Published