Improper handling of NAS DLTransport messages in Samsung’s baseband firmware can trigger a crash, causing the device to reboot or lose connectivity. The failure results in a denial of service, limiting access to cellular services without exposing data or allowing code execution. The flaw is identified as a buffer over-read in the handling routine, classified as CWE-125.

Samsung Semiconductor’s Exynos family, including core processors such as Exynos 1280, 1330, 1380, 1480, 1580, 1680, 2100, 2200, 2400, 2500, 850, and modem variants like Exynos Modem 5123, 5300, 5400, 5410, W1000, W920, and W930. No specific firmware or version details are listed, implying any firmware containing the vulnerable code may be affected.

The CVSS score has not been published and the EPSS indicates insufficient data; it is not catalogued in CISA KEV. The baseband normally processes packets received over cellular links, so an attacker who can manipulate NAS DLTransport traffic could induce a crash. Because the flaw is a crash rather than an escalation or data exfiltration, the exploitation risk is mainly availability. Without a publicly available patch, the risk remains low for typical consumer devices but could increase once a widespread vulnerability is confirmed.