Description
Incorrect handling of SIP packets leads to baseband crashes
Published: 2026-11-05
Score: n/a
EPSS: n/a
KEV: No
Impact: Denial of Service (Baseband Crash)
Action: Patch
AI Analysis

Impact

Incorrect handling of SIP packets in the baseband firmware can cause crashes, leading to a denial of service that interrupts cellular connectivity and can leave the device in an unstable state. This weakness is classified as CWE-754, an improper handling of a core protocol that can lead to crashes. No additional privileges are required for the crash; the impact is limited to service availability rather than confidentiality or integrity.

Affected Systems

Samsung Semiconductor products affected include Exynos 1080, Exynos 9110, Exynos Modem 5123, Exynos Modem 5300, and Exynos Modem 5400 baseband modules. No specific firmware version information is provided.

Risk and Exploitability

No CVSS score is currently available, and the EPSS score is not available. The vulnerability is not listed in the CISA KEV catalog. Inferred attack requires delivery of malicious SIP packets to the baseband control interface, which may be possible locally via wired or wireless connections that route SIP traffic to the device. The impact is a local denial of service; no remote code execution or data exfiltration is described.

Generated by OpenCVE AI on November 5, 2026 at 03:56 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Obtain and install the latest firmware update for the affected Exynos baseband from Samsung’s product security update page (https://semiconductor.samsung.com/support/quality-support/product-security-updates/).
  • If the device does not require SIP-based communication, disable or block SIP traffic using network access controls or firewall rules.
  • Implement network monitoring to detect malformed SIP packets and isolate customers from potential malicious traffic until the patch is applied.

Generated by OpenCVE AI on November 5, 2026 at 03:56 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 05 Nov 2026 04:15:00 +0000

Type Values Removed Values Added
Title Baseband Crash via Improper SIP Packet Handling

Thu, 05 Nov 2026 02:45:00 +0000

Type Values Removed Values Added
Description Incorrect handling of SIP packets leads to baseband crashes
Weaknesses CWE-754
References

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: samsungsemiconductor

Published:

Updated: 2026-11-05T02:24:51.642Z

Reserved: 2025-11-28T00:15:21.913Z

Link: CVE-2025-66365

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-05T03:17:17.663

Modified: 2026-11-05T03:17:17.663

Link: CVE-2025-66365

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-05T04:00:15Z

Weaknesses
  • CWE-754

    Improper Check for Unusual or Exceptional Conditions