VULNERABILITY INTELLIGENCE
CVE-2026-33970
CVSS score3.5 LOW
EPSS probability0.32%
CISA KEVNot currently listed
Published2026-09-14
Last modified2026-09-22
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L
Description
An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, W920, W930, W1000, and Modem 5410. In the 5G baseband, a NULL Pointer Dereference occurs when processing a malformed RRC Reconfiguration message.
Weakness classification
- cve@mitre.org: CWE-476