Skip to content
OpenAdvisories
High · 7.5 CVE-2025-66366 EUVD-2025-211265GHSA-48x4-685f-c87v

Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash

Published Nov 5, 2026 · Updated Nov 10, 2026 · Assigned by samsungsemiconductor

Vendor: Samsung Semiconductor Product: Exynos 1280 Product: Exynos 1330 Product: Exynos 1380 Product: Exynos 1480 Product: Exynos 1580 Product: Exynos 2400 Product: Exynos 2500 Product: Exynos Modem 5300 Product: Exynos Modem 5400 Product: Exynos Modem 5410

Description

Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash

Affected products

VendorProductAffectedFixed
Samsung Semiconductor Exynos 1280 < July 2026 July 2026
Samsung Semiconductor Exynos 1330 < July 2026 July 2026
Samsung Semiconductor Exynos 1380 < July 2026 July 2026
Samsung Semiconductor Exynos 1480 < July 2026 July 2026
Samsung Semiconductor Exynos 2400 < July 2026 July 2026
Samsung Semiconductor Exynos 1580 < July 2026 July 2026
Samsung Semiconductor Exynos 2500 < July 2026 July 2026
Samsung Semiconductor Exynos Modem 5300 < July 2026 July 2026
Samsung Semiconductor Exynos Modem 5400 < July 2026 July 2026
Samsung Semiconductor Exynos Modem 5410 < July 2026 July 2026

Advisories 1

References