Main Vulnerability Database Vulnerabilities #VU153923

Information disclosure in Samsung products - CVE-2026-33965

Published: October 7, 2026

Vulnerability identifier: #VU153923

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-33965

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application within the SIP message flow in the AIMS component. A remote attacker can send a malicious IMS message and gain unauthorized access to sensitive information on the system.

Affected software

Exynos 1080
Exynos 9110
Exynos Modem 5123
Exynos Modem 5300
Exynos Modem 5400

How to mitigate CVE-2026-33965

Install updates from vendor's website.

External References

https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-33965/

Related Security Bulletins