Description
An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. An out-of-bounds write vulnerability in the Exynos DPU driver (due to missing input length validation in color mode LUT parsing) leads to kernel memory corruption and potential privilege escalation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung | Exynos 1280 firmware | ≤ 2025-12-29 | — |
Advisories 1
- WID-SEC-2026-1750 Samsung Exynos: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 13, 2026