SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-23789

HIGH · CVSS 7.8 EPSS 0.11% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-14 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

A double-free vulnerability in the Exynos MFC encoder driver affects multiple Samsung Mobile and Wearable Processors, resulting from improper cleanup of dma_buf references during error handling. This flaw can lead to kernel memory corruption, potentially allowing attackers to execute arbitrary code. Organizations using impacted Samsung devices should prioritize patching this vulnerability to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
arbitrary code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-23789
Severity
HIGH
CVSS
7.8
EPSS
0.11%

Original NVD Description

An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC encoder driver (due to improper cleanup of dma_buf references during error handling) leads to kernel memory corruption and potential arbitrary code execution.