Description
Continuously sending control‑plane messages causes the baseband to crashes.
Published: 2026-11-05
Score: n/a
EPSS: n/a
KEV: No
Impact: Denial of Service through baseband crash
Action: Update Firmware
AI Analysis

Impact

The vulnerability allows an attacker to trigger a crash of the baseband processor by continuously sending control‑plane messages. This results in a non‑recoverable crash that disables communication and can bring down devices that rely on the affected Exynos silicon, leading to a denial of service. The weakness is a resource exhaustion flaw as indicated by CWE‑754.

Affected Systems

The flaw affects multiple Samsung Exynos series chips, including the 1080, 1280, 1330, 1380, 1480, 1580, 1680, 2100, 2200, 2400, 2500, 850, 9110, the Modem 5123, 5300, 5400, 5410, and the W1000, W920, W930 families.

Risk and Exploitability

The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating no known active exploitation at the time of analysis. However, because the attack requires only the ability to generate repeated control‑plane messages, the likelihood of exploitation is uncertain but could be high in environments where the baseband is exposed to potentially malicious traffic. The absence of publicly reported exploits suggests the risk is mostly theoretical, yet the crash severity warrants prompt action.

Generated by OpenCVE AI on November 5, 2026 at 02:20 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest baseband firmware update from Samsung’s Semiconductor support site
  • Configure network equipment to rate‑limit or filter control‑plane traffic to the device
  • Disallow or audit firmware download and OTA updates over insecure channels

Generated by OpenCVE AI on November 5, 2026 at 02:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 05 Nov 2026 02:45:00 +0000

Type Values Removed Values Added
Title Exynos Baseband Crash via Control‑Plane Message Flood

Thu, 05 Nov 2026 01:45:00 +0000

Type Values Removed Values Added
Description Continuously sending control‑plane messages causes the baseband to crashes.
Weaknesses CWE-754
References

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: samsungsemiconductor

Published:

Updated: 2026-11-05T01:39:50.981Z

Reserved: 2025-11-28T00:15:21.913Z

Link: CVE-2025-66364

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-05T02:16:57.817

Modified: 2026-11-05T02:16:57.817

Link: CVE-2025-66364

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-05T02:30:08Z

Weaknesses
  • CWE-754

    Improper Check for Unusual or Exceptional Conditions