Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash

Improper handling of NAS DLTransport messages may lead to a baseband crash.

Continuously sending control‑plane messages causes the baseband to crashes.

Improper Message Handling Before AS Security Activation in Samsung Exynos SoCs

Improper handling of messages before AS security activation can cause unexpected behavior

Kernel Memory Corruption via Malformed GNSS Firmware Length Validation in Samsung Exynos SoCs

Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.

Buffer Overwrite via NAS Message Length Validation Flaw in Samsung Exynos Processors

In the NAS message handler, improper validation of the length field in NAS message causes memory corruption

In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

NAS Authentication Request Decoding Infinite Loop Causes Denial of Service on Exynos Processors

In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.

DoS via Malformed RRC Reconfiguration Message in Samsung Exynos Modems

Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.

Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.