What is GHSA-9jqf-p4p9-5v4p?

GHSA-9jqf-p4p9-5v4p is a security advisory published by GitHub Security Advisories with High severity. An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850,...

Which CVE IDs does GHSA-9jqf-p4p9-5v4p cover?

GHSA-9jqf-p4p9-5v4p covers the following CVE IDs: CVE-2026-23789. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9jqf-p4p9-5v4p?

GHSA-9jqf-p4p9-5v4p has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

GHSA-9jqf-p4p9-5v4pHighCVSS 7.8

An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850,...

Vendor

GitHub Security Advisories

Published

September 14, 2026

Last Modified

September 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-23789 →

📋 Description

An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC encoder driver (due to improper cleanup of dma_buf references during error handling) leads to kernel memory corruption and potential arbitrary code execution.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-23789
https://semiconductor.samsung.com/support/quality-support/product-security-updates
https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2026-23789
https://github.com/advisories/GHSA-9jqf-p4p9-5v4p