Is CVE-2026-33960 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-33960 being exploited in the wild.

How severe is CVE-2026-33960?

Low severity, with a CVSS score of 2.8, published 14 September 2026.

Which products and versions are affected?

Samsung Exynos 1330 Not specified; Samsung Exynos 1380 Not specified; Samsung Exynos 1480 Not specified; Samsung Exynos 1580 Not specified; and 4 more.

Is there a fix for CVE-2026-33960?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-33960 attacked?

It is attacked with local access, in device firmware.

Am I affected by CVE-2026-33960?

Check whether you run Samsung Exynos 1330, Samsung Exynos 1380, Samsung Exynos 1480 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-33960: Samsung Exynos processor Wi-Fi driver out-of-bounds write

CVE-2026-33960 · Severity: low · CVSS 2.8 · Published 2026-09-14

Samsung's Exynos mobile and wearable processors contain a flaw in the Wi-Fi interface driver that can be exploited by sending malformed commands. This vulnerability allows an attacker to trigger improper memory allocation and write beyond buffer boundaries, causing the device to become unresponsive or crash. Affected devices include a range of Samsung mobile phones and smartwatches using these processors.

Technologies: Samsung Exynos 1330, Samsung Exynos 1380, Samsung Exynos 1480, Samsung Exynos 1580, Samsung Exynos 1680, Samsung Exynos W1000, Samsung Exynos W920, Samsung Exynos W930. Vendors: Samsung.

Quick answers

Is CVE-2026-33960 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-33960 being exploited in the wild.
How severe is CVE-2026-33960?: Low severity, with a CVSS score of 2.8, published 14 September 2026.
Which products and versions are affected?: Samsung Exynos 1330 Not specified; Samsung Exynos 1380 Not specified; Samsung Exynos 1480 Not specified; Samsung Exynos 1580 Not specified; and 4 more.
Is there a fix for CVE-2026-33960?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-33960 attacked?: It is attacked with local access, in device firmware.
Am I affected by CVE-2026-33960?: Check whether you run Samsung Exynos 1330, Samsung Exynos 1380, Samsung Exynos 1480 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability exists in the Wi-Fi interface driver of Samsung Exynos processors (both mobile and wearable variants). A malformed ioctl command sent to the Wi-Fi device driver causes improper buffer size allocation, leading to an out-of-bounds write condition. This memory corruption can result in denial of service (DoS) by causing the driver or kernel to crash. The attack vector is local and likely requires elevated privileges or specific driver access. Samsung has acknowledged the issue; patch status and availability details are not provided in the advisory.

Affected products

Samsung Exynos 1330 Not specified
Samsung Exynos 1380 Not specified
Samsung Exynos 1480 Not specified
Samsung Exynos 1580 Not specified
Samsung Exynos 1680 Not specified
Samsung Exynos W920 Not specified
Samsung Exynos W930 Not specified
Samsung Exynos W1000 Not specified

Timeline

2026-09-14: disclosed: CVE-2026-33960 publicly disclosed
2025-12-18: other: Vulnerability reported to Samsung

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.