{"id":"CVE-2026-33958","aliases":[],"cve":{"records":[{"id":"CVE-2026-33958","source":"samsungsemiconductor","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-03-24T19:59:13.806Z","published":"2026-11-05T02:37:33.731Z","modified":"2026-11-10T13:48:11.711Z"}],"publishers":[{"name":"samsungsemiconductor","role":"CNA","organizationId":"a8bfbd5c-5645-475e-a8f4-6c140c17bd29","modified":"2026-11-05T02:37:33.731Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-10T13:48:11.711Z"}],"references":[{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/","tags":[],"source":"samsungsemiconductor"}],"weaknesses":[{"id":"CWE-1286","description":"CWE-1286","source":"samsungsemiconductor"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-10T13:47:42.674656Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.","titleSource":"samsungsemiconductor","descriptionSource":"samsungsemiconductor","description":"Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.","score":7.5,"severity":"high","published":"2026-11-05T02:37:33.731Z","modified":"2026-11-10T13:48:11.711Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Samsung Semiconductor","name":"Exynos 1080","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-33958"},{"vendor":"Samsung Semiconductor","name":"Exynos 2100","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-33958"},{"vendor":"Samsung Semiconductor","name":"Exynos 1280","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-33958"},{"vendor":"Samsung Semiconductor","name":"Exynos 2200","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-33958"},{"vendor":"Samsung Semiconductor","name":"Exynos 1330","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-33958"},{"vendor":"Samsung Semiconductor","name":"Exynos 1380","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-33958"},{"vendor":"Samsung Semiconductor","name":"Exynos 1480","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-33958"},{"vendor":"Samsung Semiconductor","name":"Exynos 2400","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-33958"},{"vendor":"Samsung Semiconductor","name":"Exynos 1580","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-33958"},{"vendor":"Samsung Semiconductor","name":"Exynos 2500","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-33958"},{"vendor":"Samsung Semiconductor","name":"Exynos 1680","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-33958"},{"vendor":"Samsung Semiconductor","name":"Exynos Modem 5123","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-33958"},{"vendor":"Samsung Semiconductor","name":"Exynos Modem 5300","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-33958"},{"vendor":"Samsung Semiconductor","name":"Exynos Modem 5400","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-33958"},{"vendor":"Samsung Semiconductor","name":"Exynos Modem 5410","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"October 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-33958"}],"remediation":[],"references":["https://semiconductor.samsung.com/support/quality-support/product-security-updates/"],"sources":[{"name":"CVE","id":"CVE-2026-33958","modified":"2026-11-10T13:48:11.711Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-33958"}],"assessments":[{"source":"CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5}],"sourceAffected":[],"observedAt":"2026-11-10T14:03:14.678Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:00:33.565Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-05T03:50:34.866Z","attemptedAt":"2026-11-05T03:50:34.866Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-05T03:50:33.054Z","attemptedAt":"2026-11-05T03:50:33.054Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-11-05T03:50:32.744Z","attemptedAt":"2026-11-05T03:50:32.744Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-05T03:50:33.353Z","attemptedAt":"2026-11-05T03:50:33.353Z"}],"evidence":[{"source":"GitHub Advisory Database","id":"GHSA-3mx6-vrj9-7c42","url":"https://github.com/advisories/GHSA-3mx6-vrj9-7c42","modified":"2026-11-05T03:30:34Z","checkedAt":"2026-11-05T03:50:33.054Z"},{"source":"NVD","id":"CVE-2026-33958","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33958","modified":"2026-11-05T03:17:26.277","checkedAt":"2026-11-05T03:50:34.866Z"}],"aiSummary":{"text":"Samsung Semiconductor's Exynos products, including various models, are affected by a denial-of-service (DoS) condition due to out-of-bounds access when processing a malformed RRC Reconfiguration message. The affected versions are those prior to October 2026.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-05T03:26:04.737Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-33958"}]}}