CVE-2026-48174 PUBLISHED

Assigner: samsungsemiconductor
Reserved: 21.05.2026 Published: 05.11.2026 Updated: 05.11.2026

In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

Vendor	Samsung Semiconductor
Product	Exynos 1280
Versions	Default: unaffected affected from 0 to September 2026 (excl.)

Vendor	Samsung Semiconductor
Product	Exynos 2200
Versions	Default: unaffected affected from 0 to September 2026 (excl.)

Vendor	Samsung Semiconductor
Product	Exynos 1330
Versions	Default: unaffected affected from 0 to September 2026 (excl.)

Vendor	Samsung Semiconductor
Product	Exynos 1380
Versions	Default: unaffected affected from 0 to September 2026 (excl.)

Vendor	Samsung Semiconductor
Product	Exynos 1480
Versions	Default: unaffected affected from 0 to September 2026 (excl.)

Vendor	Samsung Semiconductor
Product	Exynos 2400
Versions	Default: unaffected affected from 0 to September 2026 (excl.)

Vendor	Samsung Semiconductor
Product	Exynos W1000
Versions	Default: unaffected affected from 0 to September 2026 (excl.)

Vendor	Samsung Semiconductor
Product	Exynos Modem 5300
Versions	Default: unaffected affected from 0 to September 2026 (excl.)

Vendor	Samsung Semiconductor
Product	Exynos Modem 5400
Versions	Default: unaffected affected from 0 to September 2026 (excl.)