Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash

Improper handling of NAS DLTransport messages may lead to a baseband crash.

Continuously sending control‑plane messages causes the baseband to crashes.

Improper Message Handling Before AS Security Activation in Samsung Exynos SoCs

Improper handling of messages before AS security activation can cause unexpected behavior

Kernel Memory Corruption via Malformed GNSS Firmware Length Validation in Samsung Exynos SoCs

Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.

Improper Validation in Exynos NPU Driver Causes Out-of-Bounds Write and Denial of Service

In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.

kernel: kernel: Memory corruption via integer overflow in Samsung Exynos NPU driver

In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.

NR RRC Message Handling Vulnerability Causes Denial of Service in Samsung Exynos Processors

In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

Buffer Overwrite via NAS Message Length Validation Flaw in Samsung Exynos Processors

In the NAS message handler, improper validation of the length field in NAS message causes memory corruption

Baseband Memory Corruption Leading to Denial of Service in Samsung Exynos Modems

In the baseband, memory corruption during NAS packet processing can cause a denial of service.

In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

NAS Authentication Request Decoding Infinite Loop Causes Denial of Service on Exynos Processors

In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.

DoS via Malformed RRC Reconfiguration Message in Samsung Exynos Modems

Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.

Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.