CVE-2025-66366 PUBLISHED

Assigner: samsungsemiconductor
Reserved: 28.11.2025 Published: 05.11.2026 Updated: 05.11.2026

Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash

Product Status

Vendor Samsung Semiconductor
Product Exynos 1280
Versions Default: unaffected
  • affected from 0 to July 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 1330
Versions Default: unaffected
  • affected from 0 to July 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 1380
Versions Default: unaffected
  • affected from 0 to July 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 1480
Versions Default: unaffected
  • affected from 0 to July 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 2400
Versions Default: unaffected
  • affected from 0 to July 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 1580
Versions Default: unaffected
  • affected from 0 to July 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 2500
Versions Default: unaffected
  • affected from 0 to July 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos Modem 5300
Versions Default: unaffected
  • affected from 0 to July 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos Modem 5400
Versions Default: unaffected
  • affected from 0 to July 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos Modem 5410
Versions Default: unaffected
  • affected from 0 to July 2026 (excl.)

References

Problem Types

  • CWE-129 CWE