CVE-2026-33971 PUBLISHED

Assigner: samsungsemiconductor
Reserved: 24.03.2026 Published: 05.11.2026 Updated: 05.11.2026

In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

Product Status

Vendor Samsung Semiconductor
Product Exynos 850
Versions Default: unaffected
  • affected from 0 to October 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 2100
Versions Default: unaffected
  • affected from 0 to October 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 1280
Versions Default: unaffected
  • affected from 0 to October 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 2200
Versions Default: unaffected
  • affected from 0 to October 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 1330
Versions Default: unaffected
  • affected from 0 to October 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 1380
Versions Default: unaffected
  • affected from 0 to October 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 1480
Versions Default: unaffected
  • affected from 0 to October 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 2400
Versions Default: unaffected
  • affected from 0 to October 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 1580
Versions Default: unaffected
  • affected from 0 to October 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 2500
Versions Default: unaffected
  • affected from 0 to October 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos 1680
Versions Default: unaffected
  • affected from 0 to October 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos W920
Versions Default: unaffected
  • affected from 0 to October 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos W930
Versions Default: unaffected
  • affected from 0 to October 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos W1000
Versions Default: unaffected
  • affected from 0 to October 2026 (excl.)
Vendor Samsung Semiconductor
Product Exynos Modem 5410
Versions Default: unaffected
  • affected from 0 to October 2026 (excl.)

References

Problem Types

  • CWE-400 CWE