An issue in the Mobile Processor (MM) component of various Samsung processors causes an application failure when the device receives a 5G NR NAS registration accept message. The flaw leads to a Denial of Service, interrupting normal operation on the affected devices. The weakness appears to stem from improper handling of the incoming message, which could result in resource exhaustion or an invalid state transition. No evidence suggests that sensitive data is disclosed or that execution of arbitrary code is possible.

The flaw affects Samsung Mobile Processor, Wearable Processor, and Modem solutions across a wide range of product lines, including Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, and Modems 5123, 5300, and 5400. All devices using these processors and modems are potentially impacted; specific revision or configuration details are not disclosed.

No EPSS score is published, and the vulnerability is not listed in the CISA KEV catalog, indicating that public exploitation has not yet been observed or reported. The attack vector is inferred to be via 5G network communication; an attacker able to send specially crafted NAS registration accept messages over a 5G NR link could trigger the DoS. The risk is primarily availability loss, while confidentiality and integrity remain unaffected.