CVE-2026-23792

4.0 mediumEPSS 0.2%

Medium (4.0). EPSS 0.2% chance of exploitation in the next 30 days.

An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, Modem 5400, and Modem 5410. Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash.

Severity

CVSS 3.1

4.0 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-346
Published: 2026-09-14
Modified: 2026-09-22
Record from: the NVD, synced 2026-10-19

References

https://semiconductor.samsung.com/support/quality-support/product-security-updates/
https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2026-23792/

Check your stack JSON