CVE-2026-33958

DoS via Malformed RRC Reconfiguration Message in Samsung Exynos Modems

Published Nov 5, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Type Values Removed Values Added
First Time appeared Samsung Semiconductor
Samsung Semiconductor exynos 1080
Samsung Semiconductor exynos 1280
Samsung Semiconductor exynos 1330
Samsung Semiconductor exynos 1380
Samsung Semiconductor exynos 1480
Samsung Semiconductor exynos 1580
Samsung Semiconductor exynos 1680
Samsung Semiconductor exynos 2100
Samsung Semiconductor exynos 2200
Samsung Semiconductor exynos 2400
Samsung Semiconductor exynos 2500
Samsung Semiconductor exynos Modem 5123
Samsung Semiconductor exynos Modem 5300
Samsung Semiconductor exynos Modem 5400
Samsung Semiconductor exynos Modem 5410
Vendors & Products Samsung Semiconductor
Samsung Semiconductor exynos 1080
Samsung Semiconductor exynos 1280
Samsung Semiconductor exynos 1330
Samsung Semiconductor exynos 1380
Samsung Semiconductor exynos 1480
Samsung Semiconductor exynos 1580
Samsung Semiconductor exynos 1680
Samsung Semiconductor exynos 2100
Samsung Semiconductor exynos 2200
Samsung Semiconductor exynos 2400
Samsung Semiconductor exynos 2500
Samsung Semiconductor exynos Modem 5123
Samsung Semiconductor exynos Modem 5300
Samsung Semiconductor exynos Modem 5400
Samsung Semiconductor exynos Modem 5410
Type Values Removed Values Added
Title DoS via Malformed RRC Reconfiguration Message in Samsung Exynos Modems
Type Values Removed Values Added
Description Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.
Weaknesses CWE-1286
References