CVE-2026-33960: Low severity Samsung Mobile Processor and Wearable Processor Exynos vulnerability

Q: What level of access does an attacker need to exploit this issue?

The CVSS vector indicates local access and low privileges are required. Exploitation also has high attack complexity and does not require user interaction.

Q: Does the reported impact include data disclosure or modification?

The CVSS metrics indicate no confidentiality or integrity impact. The reported impact is low availability impact, consistent with a denial of service condition.

Published Sep 14, 2026

Updated

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl command to the Wi-Fi interface device can lead to improper buffer size allocation, resulting in an out-of-bounds write and causing a denial of service (DoS).

Affected Software

1 affected component

Samsung Mobile Processor and Wearable Processor Exynos>=1330<=W1000

Event History

Sep 14, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The CVSS vector indicates local access and low privileges are required. Exploitation also has high attack complexity and does not require user interaction.

Does the reported impact include data disclosure or modification?