# CVE-2026-33970: Samsung Exynos 5G baseband NULL pointer dereference in RRC Reconfiguration

Source: https://junglewise.ai/threats/cve-2026-33970-samsung-exynos-5g-baseband-null-pointer-dereference-in-rrc  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-14. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-33970 · Severity: low · CVSS 3.5 · Published 2026-09-14

Samsung's Exynos 5G baseband processors power mobile devices and wearables by handling cellular communications. A vulnerability in the RRC (Radio Resource Control) message handler can cause the baseband processor to crash when processing a malformed 5G configuration message, resulting in loss of connectivity and potential denial of service.

Technologies: [Samsung Exynos 1080](https://junglewise.ai/threats/technologies/exynos-1080), [Samsung Exynos 1280](https://junglewise.ai/threats/technologies/exynos-1280), [Samsung Exynos 1330](https://junglewise.ai/threats/technologies/exynos-1330), [Samsung Exynos 1380](https://junglewise.ai/threats/technologies/exynos-1380), [Samsung Exynos 1480](https://junglewise.ai/threats/technologies/exynos-1480), [Samsung Exynos 1580](https://junglewise.ai/threats/technologies/exynos-1580), [Samsung Exynos 1680](https://junglewise.ai/threats/technologies/exynos-1680), [Samsung Exynos 2100](https://junglewise.ai/threats/technologies/exynos-2100), [Samsung Exynos 2200](https://junglewise.ai/threats/technologies/exynos-2200), [Samsung Exynos 2400](https://junglewise.ai/threats/technologies/exynos-2400), [Samsung Exynos 2500](https://junglewise.ai/threats/technologies/exynos-2500), [Samsung Exynos 850](https://junglewise.ai/threats/technologies/exynos-850), [Samsung Exynos W1000](https://junglewise.ai/threats/technologies/exynos-w1000), [Samsung Exynos W920](https://junglewise.ai/threats/technologies/exynos-w920), [Samsung Exynos W930](https://junglewise.ai/threats/technologies/exynos-w930), [Samsung Modem 5410](https://junglewise.ai/threats/technologies/modem-5410). Vendors: [Samsung](https://junglewise.ai/threats/vendors/samsung).

## Quick answers

**Is CVE-2026-33970 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-33970 being exploited in the wild.

**How severe is CVE-2026-33970?** Low severity, with a CVSS score of 3.5, published 14 September 2026.

**Which products and versions are affected?** Samsung Exynos 850; Samsung Exynos 1080; Samsung Exynos 2100; Samsung Exynos 1280; and 12 more.

**Is there a fix for CVE-2026-33970?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-33970 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-33970?** Check whether you run Samsung Exynos 1080, Samsung Exynos 1280, Samsung Exynos 1330 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A NULL pointer dereference (CWE-476) vulnerability exists in the NR RRC and L2 components of Samsung's Exynos 5G baseband. The vulnerability is triggered by processing a malformed RRC Reconfiguration message that causes a NULL pointer to be dereferenced, leading to a crash of the baseband processor. An attacker with network access to the 5G radio link can send a crafted RRC Reconfiguration message to trigger the crash. This results in denial of service (loss of cellular connectivity) but does not allow code execution or access to user data. Samsung has issued patches for affected Exynos processor and modem variants.

## Affected products

- Samsung Exynos 850
- Samsung Exynos 1080
- Samsung Exynos 2100
- Samsung Exynos 1280
- Samsung Exynos 2200
- Samsung Exynos 1330
- Samsung Exynos 1380
- Samsung Exynos 1480
- Samsung Exynos 2400
- Samsung Exynos 1580
- Samsung Exynos 2500
- Samsung Exynos 1680
- Samsung Exynos W920
- Samsung Exynos W930
- Samsung Exynos W1000
- Samsung Modem 5410

## Timeline

- 2026-09-14: disclosed
- 2025-12-24: advisory: Reported date per Samsung security advisory

## References

- [https://semiconductor.samsung.com/support/quality-support/product-security-updates/](https://semiconductor.samsung.com/support/quality-support/product-security-updates/)
- [https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2026-33970/](https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2026-33970/)

## Related threats

- [Samsung Exynos denial of service in Shannon SM Task](https://junglewise.ai/threats/cve-2023-37366-samsung-exynos-denial-of-service-in-shannon-sm-task)
- [Samsung Exynos camera driver TOCTOU race condition](https://junglewise.ai/threats/cve-2026-33968-samsung-exynos-camera-driver-toctou-race-condition)
- [Samsung Exynos camera driver out-of-bounds array access](https://junglewise.ai/threats/cve-2026-33967-samsung-exynos-camera-driver-out-of-bounds-array-access)
- [Samsung Exynos camera driver information leak via debug code](https://junglewise.ai/threats/cve-2026-33966-samsung-exynos-camera-driver-information-leak-via-debug-code)
- [Samsung Exynos untrusted pointer dereference in camera driver](https://junglewise.ai/threats/cve-2026-33964-samsung-exynos-untrusted-pointer-dereference-in-camera-driver)