← Back

CVE-2026-23786

nvd nist
Published: Sep 14, 2026Modified: Sep 14, 2026

JSON object

Loading...
2.8
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L
Exploitability: 1.1 / Impact: 1.4
Source: MITRE (Secondary)

Description

An issue was discovered in DPU Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A TOCTOU race condition in the Exynos DRM HDR Driver leads to a heap overflow, causing a kernel crash.

Related CWEs

CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.

References (2)

Source: cve@mitre.org
Source: cve@mitre.org

Timeline

No history available yet.