Memory Corruption Vulnerability in Samsung Exynos 1580 Processor
CVE-2026-33957

4.2MEDIUM

Key Information:

Vendor

Samsung

Vendor
CVE Published:
14 September 2026

What is CVE-2026-33957?

A memory corruption issue has been identified in the CustOS Driver of the Samsung Mobile Processor Exynos 1580. This vulnerability occurs when oversized shared memory is requested from the custos_iwc device, resulting in potential out-of-bounds read and write operations. Such operations can lead to severe consequences, including unauthorized access to sensitive information and degradation of device integrity.

Affected Version(s)

Exynos 1580 firmware 0 <= 2026-01-07

References

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.