CVEvulnerability
CVE-2026-33970
3.5 LOW
Official page ↗
- Status
- Awaiting Analysis
- Published
- 2026-09-14
- Last modified
- 2026-09-22
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.5 LOW — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L
- Weaknesses
- CWE-476
Description
An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, W920, W930, W1000, and Modem 5410. In the 5G baseband, a NULL Pointer Dereference occurs when processing a malformed RRC Reconfiguration message.
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://semiconductor.samsung.com/support/quality-support/product-security-updates/ semiconductor.samsung.com
- https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2026-33970/ semiconductor.samsung.com