CVE-2026-48174None▾ SunlitIn the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.
exynos_1280 < September 2026exynos_2200 < September 2026exynos_1330 < September 2026exynos_1380 < September 2026exynos_1480 < September 2026exynos_2400 < September 2026exynos_w1000 < September 2026exynos_modem_5300 < September 2026exynos_modem_5400 < September 2026Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-48175Medium· 5.5Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.
CVE-2026-35494NoneIn the baseband, memory corruption during NAS packet processing can cause a denial of service.
CVE-2026-48186NoneImproper handling of messages before AS security activation can cause unexpected behavior
CVE-2026-68985NoneIn the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service.
CVE-2026-69025NoneIn the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service
CVE-2025-66366NoneIncorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash