CVE-2026-48174 In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
CriticalCVSS 9.8
EPSS 0.17%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Semiconductor Exynos 1280 | < September 2026 | September 2026 |
| Samsung Semiconductor Exynos 2200 | < September 2026 | September 2026 |
| Samsung Semiconductor Exynos 1330 | < September 2026 | September 2026 |
| Samsung Semiconductor Exynos 1380 | < September 2026 | September 2026 |
| Samsung Semiconductor Exynos 1480 | < September 2026 | September 2026 |
| Samsung Semiconductor Exynos 2400 | < September 2026 | September 2026 |
| Samsung Semiconductor Exynos W1000 | < September 2026 | September 2026 |
| Samsung Semiconductor Exynos Modem 5300 | < September 2026 | September 2026 |
| Samsung Semiconductor Exynos Modem 5400 | < September 2026 | September 2026 |