Input validation error in Samsung products - CVE-2026-33963
Published: June 2, 2026 / Updated: June 2, 2026
Vulnerability identifier: #VU133222
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2026-33963
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Samsung
Affected software:
Exynos 1330
Exynos 1380
Exynos 1480
Exynos 2400
Exynos 1580
Exynos 2500
Exynos 2600
Exynos 1680
Exynos 1330
Exynos 1380
Exynos 1480
Exynos 2400
Exynos 1580
Exynos 2500
Exynos 2600
Exynos 1680
Detailed vulnerability description
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to improper processing a malformed message in the camera driver. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
How to mitigate CVE-2026-33963
Install updates from vendor's website.