Baseband Crash via Improper SIP Packet Handling

Incorrect handling of SIP packets leads to baseband crashes

Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash

Improper handling of NAS DLTransport messages may lead to a baseband crash.

Continuously sending control‑plane messages causes the baseband to crashes.

Improper Message Handling Before AS Security Activation in Samsung Exynos SoCs

Improper handling of messages before AS security activation can cause unexpected behavior

Kernel memory corruption in GNSS firmware loader due to insufficient length validation

Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.

Denial of Service Vulnerability in Exynos Modem IMS Stack Due to SDP Payload Handling

In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service

Improper Message Validation Leads to Memory Corruption in Samsung Exynos SoCs

A memory corruption vulnerability caused by improper validation of messages

NR RRC Message Handling Vulnerability Causes Denial of Service in Samsung Exynos Processors

In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

Buffer Overwrite via NAS Message Length Validation Flaw in Samsung Exynos Processors

In the NAS message handler, improper validation of the length field in NAS message causes memory corruption

Improper SIP Packet Handling Causing Access Control Bypass in Samsung Exynos IMS Stack

In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability

In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.

NAS Authentication Request Decoding Infinite Loop Causes Denial of Service on Exynos Processors

In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.

Malicious IMS Message Leading to Information Exposure via SIP Flow

An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.

DoS via Malformed RRC Reconfiguration Message in Samsung Exynos Modems

Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.

Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.