CVE-2026-33966

Sensitive Information Leak via Debugging Code in Samsung Exynos Camera Driver

Published Sep 14, 2026 CVSS 3.1 · 2.8 Low EPSS < 1% KEV · Not listed

Description

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. An information Leak occurs in the camera driver due to Insertion of Sensitive Information Into Debugging Code.

Analysis

Technical impact

The flaw arises from the inclusion of sensitive data in the camera driver’s debugging code within Samsung Exynos processors. When debug output is accessed, confidential information that should remain protected can be exposed, resulting in an information leak. The weakness is an improper handling of confidential data in code that is visible to a debugging interface, identified as CWE-215.

Affected Systems

Samsung Exynos 1330 firmware and its variants—including the 1380, 1480, 2400, 1580, 2500, 2600, and 1680—are affected. The issue resides specifically in the camera driver component of these mobile processors.

Risk and Exploitability

With a CVSS score of 2.8, the vulnerability is classified as low severity. The EPSS score is below 1%, indicating a very low likelihood of exploitation. It is not listed in the CISA KEV catalog, and no public exploit is known. The attack vector is inferred to be local; an adversary would need physical or software access that allows them to read the device’s debugging output, which is normally restricted to developers or system software.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Samsung

Exynos 1330 firmware

unknown

Version	Status	Constraints
`0`	affected	≤ 2025-12-15

No data.

Vendor Product Versions

Samsung

Exynos 1330 Firmware

Version	Status	Scheme	Platform
`[0,2025-12-15]`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply any Samsung firmware updates that eliminate the debugging code containing sensitive information.
If an update is unavailable, logging so that no confidential data is emitted.
Restrict privileged access to the device, limiting who can enable or read debugging interfaces, to reduce the risk of local exploitation.

Generated by OpenCVE AI on September 15, 2026 at 16:10 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Changed

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.128% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://semiconductor.samsung.com/support/quality-support/product-security-updates/
https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2026-33966/

History

Sep 15, 2026 4:30 PM Title updated View changes

Type	Values Removed	Values Added
Title		Sensitive Information Leak via Debugging Code in Samsung Exynos Camera Driver

Sep 14, 2026 10:45 PM Title updated View changes

Type	Values Removed	Values Added
Title	Information Leak via Sensitive Data in Exynos Camera Driver Debugging Code

Sep 14, 2026 9:00 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sep 14, 2026 12:30 PM Title updated View changes

Type	Values Removed	Values Added
Title		Information Leak via Sensitive Data in Exynos Camera Driver Debugging Code

Sep 14, 2026 2:45 AM Description updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. An information Leak occurs in the camera driver due to Insertion of Sensitive Information Into Debugging Code.
First Time appeared		Samsung Samsung exynos 1330 Firmware
Weaknesses		CWE-215
CPEs		cpe:2.3:a:samsung:exynos_1330_firmware::::::::
Vendors & Products		Samsung Samsung exynos 1330 Firmware
References		https://semiconductor.samsung.com/support/quality-support/product-security-updates/ https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2026-33966/
Metrics		cvssV3_1 `{'score': 2.8, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N'}`