This vulnerability involves a double-free condition in the Display Processing Unit (DPU) driver of Samsung Exynos mobile processors (models 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600). The issue is caused by improper handling of pointers during DMA buffer reallocation, which can corrupt kernel memory and potentially lead to use-after-free scenarios. The CVSS 3.1 base score is 4.2, indicating medium severity, with attack vector local, high attack complexity, low privileges required, no user interaction, scope changed, no confidentiality impact, low integrity impact, and low availability impact.

Successful exploitation could cause kernel memory corruption and a use-after-free condition, potentially leading to system instability or denial of service. There is no indication of confidentiality loss, but integrity and availability impacts are low. The attack requires local access with low privileges and is complex to execute.

No official patch or remediation information is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, avoid untrusted local code execution and monitor for vendor updates.