Is CVE-2026-23793 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-23793 being exploited in the wild.

How severe is CVE-2026-23793?

Low severity, with a CVSS score of 3.5, published 14 September 2026.

Which products and versions are affected?

Samsung Exynos 1330 All affected versions; Samsung Exynos 1380 All affected versions; Samsung Exynos 1480 All affected versions; Samsung Exynos 2400 All affected versions.

Is there a fix for CVE-2026-23793?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-23793 attacked?

It is attacked with local access, in device firmware.

Am I affected by CVE-2026-23793?

Check whether you run Samsung Exynos 1330, Samsung Exynos 1380, Samsung Exynos 1480 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-23793: Samsung Exynos camera GDC driver out-of-bounds memory access

CVE-2026-23793 · Severity: low · CVSS 3.5 · Published 2026-09-14

Samsung's Exynos mobile processors (used in Galaxy smartphones and tablets) contain a camera driver vulnerability that can corrupt kernel memory when exploited. An attacker with local device access could leverage this to crash the system, escalate privileges, or potentially execute arbitrary code, affecting the stability and security of affected mobile devices.

Technologies: Samsung Exynos 1330, Samsung Exynos 1380, Samsung Exynos 1480, Samsung Exynos 2400. Vendors: Samsung.

Quick answers

Is CVE-2026-23793 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-23793 being exploited in the wild.
How severe is CVE-2026-23793?: Low severity, with a CVSS score of 3.5, published 14 September 2026.
Which products and versions are affected?: Samsung Exynos 1330 All affected versions; Samsung Exynos 1380 All affected versions; Samsung Exynos 1480 All affected versions; Samsung Exynos 2400 All affected versions.
Is there a fix for CVE-2026-23793?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-23793 attacked?: It is attacked with local access, in device firmware.
Am I affected by CVE-2026-23793?: Check whether you run Samsung Exynos 1330, Samsung Exynos 1380, Samsung Exynos 1480 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An out-of-bounds memory access vulnerability exists in the camera GDC (Geometric Distortion Correction) driver on Samsung Exynos processors 1330, 1380, 1480, and 2400. The vulnerability arises from improper bounds checking in the driver, allowing an attacker to read or write memory outside allocated buffers. Exploitation requires local access to the device and likely interaction with or control over camera operations. Successful exploitation can lead to kernel memory corruption, system crashes, or privilege escalation. Samsung has classified this as medium severity and patches should be available through device security updates.

Affected products

Samsung Exynos 1330 All affected versions
Samsung Exynos 1380 All affected versions
Samsung Exynos 1480 All affected versions
Samsung Exynos 2400 All affected versions

Timeline

2026-09-14: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.