Executive brief
A vulnerability has been identified in the modem and processor components of various Samsung mobile and wearable devices. These components handle cellular network communications. An attacker could exploit this flaw to cause the device's modem to crash or stop responding, resulting in a loss of cellular connectivity and a disruption of mobile services.
Technical details
A vulnerability exists in the Non-Access Stratum (NAS) layer of several Samsung Exynos mobile processors, wearable processors, and standalone modems. The issue stems from the incorrect handling of Downlink (DL) NAS Transport packets. A remote attacker can exploit this by sending specially crafted packets over the network, leading to uncontrolled resource consumption (CWE-400) and a subsequent Denial of Service (DoS) of the modem component. The vulnerability affects a wide range of chipsets including the Exynos 980 through 2500 series, wearable chips like the W1000, and 5G modems like the 5400. No user interaction or authentication is required for exploitation.
Affected products
- Samsung Exynos 980
- Samsung Exynos 990
- Samsung Exynos 850
- Samsung Exynos 1080
- Samsung Exynos 2100
- Samsung Exynos 1280
- Samsung Exynos 2200
- Samsung Exynos 1330
- Samsung Exynos 1380
- Samsung Exynos 1480
- Samsung Exynos 2400
- Samsung Exynos 1580
- Samsung Exynos 2500
- Samsung Exynos 9110
- Samsung Exynos W920
- Samsung Exynos W930
- Samsung Exynos W1000
- Samsung Exynos Modem 5123
- Samsung Exynos Modem 5300
- Samsung Exynos Modem 5400
Timeline
- 2025-06-05: disclosed: Reported date according to vendor advisory
- 2026-04-06: advisory: Initial NVD publication date