cve.bz

CVE-2026-23790

4.2 mediumEPSS 0.1%

Medium (4.2). EPSS 0.1% chance of exploitation in the next 30 days.

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vulnerability in the Samsung Exynos DPU driver (due to improper pointer management during DMA buffer reallocation) leads to kernel memory corruption and a potential use-after-free.

Severity

CVSS 3.1

4.2 medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L
EPSS
0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWE
CWE-415
Published
Modified
Record from
the NVD, synced

References

Check your stackJSON