Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Samsung Exynos ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Informationen offenzulegen oder einen Denial of Service zu verursachen.
Product
Exynos ist der Markenname für Samsung-Mobilfunk-Chipsätze und Prozessoren.
Vulnerabilities 5
-
Critical 9.8
In the NAS message handler, improper validation of the length field in NAS message causes memory corruption
-
Critical 9.8
In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a de…
-
High 7.5
A memory corruption vulnerability caused by improper validation of messages
-
High 7.5
In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service
-
Medium 5.5
Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-117273, EUVD-2026-117272, EUVD-2026-117265, EUVD-2026-117264, EUVD-2026-117262
-
#1
Initiale Fassung
References
-
Samsung Product Security Update vom 2026-09-06
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-48173/
-
Samsung Product Security Update vom 2026-09-06
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-48174/
-
Samsung Product Security Update vom 2026-09-06
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-48175/
-
Samsung Product Security Update vom 2026-09-06
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-48176/
-
Samsung Product Security Update vom 2026-09-06
https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-48179/