CVE-2026-23789

Double‑Free Vulnerability in Samsung Exynos 850 MFC Encoder Driver

Published Sep 14, 2026 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Description

An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC encoder driver (due to improper cleanup of dma_buf references during error handling) leads to kernel memory corruption and potential arbitrary code execution.

Analysis

Technical impact

A double‑free bug in the MFC encoder driver of Samsung Exynos 850 firmware can corrupt kernel memory. If successfully triggered, the flaw permits an attacker to run arbitrary code with kernel privileges, a vulnerability classified as CWE‑415.

Affected Systems

Samsung devices that run the Exynos 850 firmware are affected. The flaw exists within the driver shipped with that firmware and therefore all hardware platforms using that firmware are impacted.

Risk and Exploitability

The CVSS score of 7.8 indicates high severity, while the EPSS score of < 1% shows a very low likelihood of exploitation at present. Based on the description, it is inferred that the flaw can be triggered from user‑space code that causes an encoding error, creating a local privilege escalation path to kernel code execution. The vulnerability is not currently listed in CISA’s KEV catalog.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Samsung

Exynos 850 firmware

unknown

Version	Status	Constraints
`0`	affected	≤ 2025-12-23

No data.

Vendor Product Versions

Samsung

Exynos 850 Firmware

Version	Status	Scheme	Platform
`[0,2025-12-23]`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the latest Samsung firmware update that contains the patch for CVE-2026-23789.
If a patch is unavailable, disable the MFC encoder driver or block its usage until an update is released.
Regularly check Samsung’s security update portal for new firmware releases and apply updates as soon as they are available.

Generated by OpenCVE AI on September 15, 2026 at 17:06 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.152% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://semiconductor.samsung.com/support/quality-support/product-security-updates/
https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2026-23789/

History

Sep 17, 2026 1:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Sep 15, 2026 5:30 PM Title updated View changes

Type	Values Removed	Values Added
Title		Double‑Free Vulnerability in Samsung Exynos 850 MFC Encoder Driver

Sep 14, 2026 11:30 PM Title updated View changes

Type	Values Removed	Values Added
Title	Double‑Free in Exynos MFC Encoder Driver Enables Kernel Memory Corruption

Sep 14, 2026 12:15 PM Title updated View changes

Type	Values Removed	Values Added
Title		Double‑Free in Exynos MFC Encoder Driver Enables Kernel Memory Corruption

Sep 14, 2026 1:30 AM Description updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC encoder driver (due to improper cleanup of dma_buf references during error handling) leads to kernel memory corruption and potential arbitrary code execution.
First Time appeared		Samsung Samsung exynos 850 Firmware
Weaknesses		CWE-415
CPEs		cpe:2.3:a:samsung:exynos_850_firmware::::::::
Vendors & Products		Samsung Samsung exynos 850 Firmware
References		https://semiconductor.samsung.com/support/quality-support/product-security-updates/ https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2026-23789/
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H'}`