Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-48174 EUVD-2026-117264GHSA-698c-c552-hvcw

In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service cond…

Published Nov 5, 2026 · Updated Nov 10, 2026 · Assigned by samsungsemiconductor

Vendor: Samsung Semiconductor Product: Exynos 1280 Product: Exynos 1330 Product: Exynos 1380 Product: Exynos 1480 Product: Exynos 2200 Product: Exynos 2400 Product: Exynos Modem 5300 Product: Exynos Modem 5400 Product: Exynos W1000

Description

In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

Affected products

VendorProductAffectedFixed
Samsung Semiconductor Exynos 1280 < September 2026 September 2026
Samsung Semiconductor Exynos 2200 < September 2026 September 2026
Samsung Semiconductor Exynos 1330 < September 2026 September 2026
Samsung Semiconductor Exynos 1380 < September 2026 September 2026
Samsung Semiconductor Exynos 1480 < September 2026 September 2026
Samsung Semiconductor Exynos 2400 < September 2026 September 2026
Samsung Semiconductor Exynos W1000 < September 2026 September 2026
Samsung Semiconductor Exynos Modem 5300 < September 2026 September 2026
Samsung Semiconductor Exynos Modem 5400 < September 2026 September 2026

Advisories 1

References