Samsung Semiconductor Exynos Modem 5400

• CVE-2026-48173 Unrated In the NAS message handler, improper validation of the length field in NAS message causes memory corruption 0.1%
• CVE-2026-48174 Unrated In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition. 0.2%
• CVE-2026-48175 Medium 5.5 Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition. <0.1%
• CVE-2026-48186 Unrated Improper handling of messages before AS security activation can cause unexpected behavior 0.1%
• CVE-2026-69068 Unrated Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory. 0.1%
• CVE-2025-66366 Unrated Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash 0.1%
• CVE-2026-33965 Unrated An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through the SIP message flow. 0.1%
• CVE-2025-66367 Unrated Improper handling of NAS DLTransport messages may lead to a baseband crash. 0.1%
• CVE-2026-33958 Unrated Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition. 0.1%
• CVE-2026-33969 Unrated In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service. 0.2%
• CVE-2026-33972 Unrated In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation. 0.1%
• CVE-2026-48179 Unrated In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service 0.1%
• CVE-2026-48176 Unrated A memory corruption vulnerability caused by improper validation of messages 0.1%
• CVE-2026-35495 Unrated In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability 0.1%
• CVE-2025-66365 Unrated Incorrect handling of SIP packets leads to baseband crashes 0.1%
• CVE-2025-66364 Unrated Continuously sending control‑plane messages causes the baseband to crashes. 0.1%