CVE-2026-33971None▾ SunlitIn the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
exynos_850 < October 2026exynos_2100 < October 2026exynos_1280 < October 2026exynos_2200 < October 2026exynos_1330 < October 2026exynos_1380 < October 2026exynos_1480 < October 2026exynos_2400 < October 2026exynos_1580 < October 2026exynos_2500 < October 2026exynos_1680 < October 2026exynos_w920 < October 2026exynos_w930 < October 2026exynos_w1000 < October 2026exynos_modem_5410 < October 2026Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-48173NoneIn the NAS message handler, improper validation of the length field in NAS message causes memory corruption
CVE-2026-69006NoneInsufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.
CVE-2025-66367NoneImproper handling of NAS DLTransport messages may lead to a baseband crash.
CVE-2026-33969NoneIn the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.
CVE-2025-66364NoneContinuously sending control‑plane messages causes the baseband to crashes.
CVE-2026-48175Medium· 5.5Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.