Impact
The vulnerability allows an attacker to trigger a crash of the baseband processor by continuously sending control‑plane messages. This results in a non‑recoverable crash that disables communication and can bring down devices that rely on the affected Exynos silicon, leading to a denial of service. The weakness is a resource exhaustion flaw as indicated by CWE‑754.
Affected Systems
The flaw affects multiple Samsung Exynos series chips, including the 1080, 1280, 1330, 1380, 1480, 1580, 1680, 2100, 2200, 2400, 2500, 850, 9110, the Modem 5123, 5300, 5400, 5410, and the W1000, W920, W930 families.
Risk and Exploitability
The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating no known active exploitation at the time of analysis. However, because the attack requires only the ability to generate repeated control‑plane messages, the likelihood of exploitation is uncertain but could be high in environments where the baseband is exposed to potentially malicious traffic. The absence of publicly reported exploits suggests the risk is mostly theoretical, yet the crash severity warrants prompt action.
OpenCVE Enrichment