Samsung Semiconductor Exynos Modem 5300
17 CVEs affecting Samsung Semiconductor Exynos Modem 5300. Latest disclosed: 2026-11-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-48175 | Medium | 5.5 | 2026-11-05 | Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition. |
CVE-2026-69068 | | 2026-11-05 | Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory. | |
CVE-2026-48186 | | 2026-11-05 | Improper handling of messages before AS security activation can cause unexpected behavior | |
CVE-2026-48179 | | 2026-11-05 | In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service | |
CVE-2026-48176 | | 2026-11-05 | A memory corruption vulnerability caused by improper validation of messages | |
CVE-2026-48174 | | 2026-11-05 | In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition. | |
CVE-2026-48173 | | 2026-11-05 | In the NAS message handler, improper validation of the length field in NAS message causes memory corruption | |
CVE-2026-35495 | | 2026-11-05 | In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability | |
CVE-2026-35494 | | 2026-11-05 | In the baseband, memory corruption during NAS packet processing can cause a denial of service. | |
CVE-2026-33972 | | 2026-11-05 | In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation. | |
CVE-2026-33969 | | 2026-11-05 | In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service. | |
CVE-2026-33965 | | 2026-11-05 | An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow. | |
CVE-2026-33958 | | 2026-11-05 | Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition. | |
CVE-2025-66367 | | 2026-11-05 | Improper handling of NAS DLTransport messages may lead to a baseband crash. | |
CVE-2025-66366 | | 2026-11-05 | Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash | |
CVE-2025-66365 | | 2026-11-05 | Incorrect handling of SIP packets leads to baseband crashes | |
CVE-2025-66364 | | 2026-11-05 | Continuously sending control‑plane messages causes the baseband to crashes. |