exynos_modem_5400 vulnerabilities

CVEs whose affected-version data names the exynos_modem_5400 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

exynos_modem_5400 vulnerabilities

Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.

In the NAS message handler, improper validation of the length field in NAS message causes memory corruption

In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

Improper handling of messages before AS security activation can cause unexpected behavior

Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.

An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow.

Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash

Improper handling of NAS DLTransport messages may lead to a baseband crash.

In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service.

Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.

In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service

A memory corruption vulnerability caused by improper validation of messages

In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.

In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability

Incorrect handling of SIP packets leads to baseband crashes

Continuously sending control‑plane messages causes the baseband to crashes.

Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash