CVE-2026-33971 In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
CriticalCVSS 9.8
- Published
- Updated
- Exploit status
- No public exploit known
Description
In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Semiconductor Exynos 850 | < October 2026 | October 2026 |
| Samsung Semiconductor Exynos 2100 | < October 2026 | October 2026 |
| Samsung Semiconductor Exynos 1280 | < October 2026 | October 2026 |
| Samsung Semiconductor Exynos 2200 | < October 2026 | October 2026 |
| Samsung Semiconductor Exynos 1330 | < October 2026 | October 2026 |
| Samsung Semiconductor Exynos 1380 | < October 2026 | October 2026 |
| Samsung Semiconductor Exynos 1480 | < October 2026 | October 2026 |
| Samsung Semiconductor Exynos 2400 | < October 2026 | October 2026 |
| Samsung Semiconductor Exynos 1580 | < October 2026 | October 2026 |
| Samsung Semiconductor Exynos 2500 | < October 2026 | October 2026 |
| Samsung Semiconductor Exynos 1680 | < October 2026 | October 2026 |
| Samsung Semiconductor Exynos W920 | < October 2026 | October 2026 |
| Samsung Semiconductor Exynos W930 | < October 2026 | October 2026 |
| Samsung Semiconductor Exynos W1000 | < October 2026 | October 2026 |
| Samsung Semiconductor Exynos Modem 5410 | < October 2026 | October 2026 |