CVE-2026-23792

MEDIUM CVSS 3.1: 4.0 EPSS 0.13%
Updated Sep 22, 2026
Samsung
Parameter Value
CVSS 4.0 (MEDIUM)
Affected Versions before 2025-10-22
Type CWE-346 (Origin Validation Error)
Vendor Samsung
Public PoC No

An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, Modem 5400, and Modem 5410. Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
High
Difficult to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
None
No data leak
Integrity
None
No data modification
Availability
Low
Partial disruption

CVSS Vector v3.1

Vulnerable Products 1

Configuration From (including) Up to (excluding)
Samsung Exynos_1080_Firmware
cpe:2.3:a:samsung:exynos_1080_firmware:*:*:*:*:*:*:*:*
— <= 2025-10-22