An Incorrect handling of LTE MAC packets that contain many MAC Control Elements causes the baseband of Samsung Exynos mobile, wearable and modem processors to crash. This leads to a denial‑of‑service condition, where normal cellular communication is disrupted and the device may become unusable until power cycling or reboot. The weakness is reflected in CWE‑400 as an improper resource handling flaw.

The vulnerability affects a wide range of Samsung Exynos silicon, including the 580‑series mobile processors (Exynos 850, 980, 990, 1080, 1280, 1330, 1380, 1480, 1580, 2100, 2200, 2400, 2500, 9110), wearable processors (W920, W930, W1000), and modem variants (Modem 5123, Modem 5300, Modem 5400). All affected devices run firmware that implements the L2 baseband stack susceptible to the crash.

The CVSS score of 9.1 places this flaw in the high‑severity category, while the EPSS score of less than 1 % indicates a low probability of exploitation in the current threat landscape. The flaw is not listed in the CISA KEV catalog. Exploitation would require a network‑level attacker to inject specially crafted LTE MAC packets containing a large number of MAC Control Elements while the device is active on a cellular network. The attack likely results in a non‑reversible crash until the device is rebooted or re‑firmwareed.