Double-Free Vulnerability in Samsung Exynos Mobile Processors

CVE-2026-23789

What is CVE-2026-23789?

A double-free vulnerability exists in the MFC encoder driver of Samsung's Exynos mobile and wearable processors, caused by improper cleanup of dma_buf references during error handling. This flaw may lead to kernel memory corruption, enabling potential attackers to execute arbitrary code. Affected products are widely utilized in mobile and wearable devices, necessitating prompt security updates to mitigate the risk.

References