This vulnerability (CVE-2026-33964) affects the camera driver in Samsung Exynos 1580 and 2500 firmware. An attacker can cause an untrusted pointer dereference by sending a malformed message to the camera driver, which may result in limited information disclosure or denial of service. The CVSS 3.1 vector indicates the attack requires local access with high attack complexity and low privileges, no user interaction, and impacts confidentiality and availability with a scope change.

Successful exploitation can cause limited disclosure of information or denial of service on affected devices running the vulnerable firmware versions. The impact is limited by the requirement for local access and high attack complexity, but the vulnerability can disrupt device functionality or leak some information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is released, restrict local access to trusted users and monitor for suspicious activity related to the camera driver.