CVE-2026-23789: CWE-415 Double Free in Samsung Exynos 850 firmware
CVE-2026-23789 is a high-severity double-free vulnerability in the Samsung Exynos MFC encoder driver affecting multiple Exynos mobile and wearable processors. The flaw arises from improper cleanup of dma_buf references during error handling, leading to kernel memory corruption and potential arbitrary code execution.
AI Analysis
Technical Summary
This vulnerability exists in the MFC (Multi-Format Codec) component of Samsung's Exynos processors, including models 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. The issue is a double-free condition caused by incorrect handling of dma_buf references during error cleanup in the MFC encoder driver. Exploiting this flaw could corrupt kernel memory and allow an attacker to execute arbitrary code with kernel privileges. The CVSS v3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability, with attack vector local, high attack complexity, and low privileges required.
Potential Impact
Successful exploitation can lead to kernel memory corruption and arbitrary code execution with elevated privileges, potentially compromising the entire device. The vulnerability affects confidentiality, integrity, and availability of the system.
Mitigation Recommendations
No official patch or remediation details are provided in the available data. Patch status is not yet confirmed — check Samsung's vendor advisory for current remediation guidance. Until a fix is available, limit local access to trusted users and monitor for updates from Samsung.
CVE-2026-23789: CWE-415 Double Free in Samsung Exynos 850 firmware
Description
CVE-2026-23789 is a high-severity double-free vulnerability in the Samsung Exynos MFC encoder driver affecting multiple Exynos mobile and wearable processors. The flaw arises from improper cleanup of dma_buf references during error handling, leading to kernel memory corruption and potential arbitrary code execution.
CVSS v3.1
Score 7.8high
Affected software
Samsung
Exynos 850 firmware
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability exists in the MFC (Multi-Format Codec) component of Samsung's Exynos processors, including models 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. The issue is a double-free condition caused by incorrect handling of dma_buf references during error cleanup in the MFC encoder driver. Exploiting this flaw could corrupt kernel memory and allow an attacker to execute arbitrary code with kernel privileges. The CVSS v3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability, with attack vector local, high attack complexity, and low privileges required.
Potential Impact
Successful exploitation can lead to kernel memory corruption and arbitrary code execution with elevated privileges, potentially compromising the entire device. The vulnerability affects confidentiality, integrity, and availability of the system.
Mitigation Recommendations
No official patch or remediation details are provided in the available data. Patch status is not yet confirmed — check Samsung's vendor advisory for current remediation guidance. Until a fix is available, limit local access to trusted users and monitor for updates from Samsung.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-01-16T00:00:00.000Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6aa74b1055bf5e2cf5548845
Added to database: 09/14/2026, 01:17:04 UTC
Last enriched: 09/14/2026, 01:31:28 UTC
Last updated: 09/14/2026, 03:36:15 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.