CVE-2026-33958 - Vulnerability Details - OpenCVE

Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0015.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://semiconductor.samsung.com/support/quality-support/product-security-updates/

History

Thu, 05 Nov 2026 04:00:00 +0000

Type	Values Removed	Values Added
Title		DoS via Malformed RRC Reconfiguration Message in Samsung Exynos Modems

Thu, 05 Nov 2026 02:45:00 +0000

Type	Values Removed	Values Added
Description		Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.
Weaknesses		CWE-1286
References		https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: samsungsemiconductor

Published: 2026-11-05T02:37:33.731Z

Updated: 2026-11-05T02:37:33.731Z

Reserved: 2026-03-24T19:59:13.806Z

Link: CVE-2026-33958

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-11-05T03:17:26.277

Modified: 2026-11-05T03:17:26.277

Link: CVE-2026-33958

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-11-05T03:45:18Z

Weaknesses

CWE-1286

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-33958", "assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29", "state": "PUBLISHED", "assignerShortName": "samsungsemiconductor", "dateReserved": "2026-03-24T19:59:13.806Z", "datePublished": "2026-11-05T02:37:33.731Z", "dateUpdated": "2026-11-05T02:37:33.731Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-1286", "description": "CWE-1286", "type": "CWE"}]}], "affected": [{"vendor": "Samsung Semiconductor", "product": "Exynos 1080", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos 2100", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos 1280", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos 2200", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos 1330", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos 1380", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos 1480", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos 2400", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos 1580", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos 2500", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos 1680", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos Modem 5123", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos Modem 5300", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos Modem 5400", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos Modem 5410", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<span style=\"background-color: rgb(255, 255, 255);\">Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.</span>"}]}], "references": [{"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"}], "providerMetadata": {"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29", "shortName": "samsungsemiconductor", "dateUpdated": "2026-11-05T02:37:33.731Z"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Exynos 1080", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos 2100", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos 1280", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos 2200", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos 1330", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos 1380", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos 1480", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos 2400", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos 1580", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos 2500", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos 1680", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos Modem 5123", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos Modem 5300", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos Modem 5400", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos Modem 5410", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}], "source": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition."}], "id": "CVE-2026-33958", "lastModified": "2026-11-05T03:17:26.277", "metrics": {}, "published": "2026-11-05T03:17:26.277", "references": [{"source": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29", "url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"}], "sourceIdentifier": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1286"}], "source": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29", "type": "Secondary"}]}