{"id":"CVE-2026-48179","aliases":[],"cve":{"records":[{"id":"CVE-2026-48179","source":"samsungsemiconductor","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-05-21T04:23:11.791Z","published":"2026-11-05T02:37:05.677Z","modified":"2026-11-10T13:36:12.444Z"}],"publishers":[{"name":"samsungsemiconductor","role":"CNA","organizationId":"a8bfbd5c-5645-475e-a8f4-6c140c17bd29","modified":"2026-11-05T02:37:05.677Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-10T13:36:12.444Z"}],"references":[{"url":"https://semiconductor.samsung.com/support/quality-support/product-security-updates/","tags":[],"source":"samsungsemiconductor"}],"weaknesses":[{"id":"CWE-1286","description":"CWE-1286","source":"samsungsemiconductor"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-10T13:36:08.283030Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"partial"}]}]},"title":"In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service","titleSource":"samsungsemiconductor","descriptionSource":"samsungsemiconductor","description":"In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service","score":7.5,"severity":"high","published":"2026-11-05T02:37:05.677Z","modified":"2026-11-10T13:36:12.444Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Samsung Semiconductor","name":"Exynos 1080","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"September 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-48179"},{"vendor":"Samsung Semiconductor","name":"Exynos 9110","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"September 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-48179"},{"vendor":"Samsung Semiconductor","name":"Exynos Modem 5123","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"September 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-48179"},{"vendor":"Samsung Semiconductor","name":"Exynos Modem 5300","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"September 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-48179"},{"vendor":"Samsung Semiconductor","name":"Exynos Modem 5400","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"September 2026","versionType":"date"}],"defaultStatus":"unaffected","cpes":[],"source":"samsungsemiconductor","url":"https://www.cve.org/CVERecord?id=CVE-2026-48179"}],"remediation":[],"references":["https://semiconductor.samsung.com/support/quality-support/product-security-updates/"],"sources":[{"name":"CVE","id":"CVE-2026-48179","modified":"2026-11-10T13:36:12.444Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-48179"}],"assessments":[{"source":"CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5}],"sourceAffected":[],"observedAt":"2026-11-10T13:57:35.265Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:00:33.565Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-05T03:55:36.599Z","attemptedAt":"2026-11-05T03:55:36.599Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-05T03:55:35.288Z","attemptedAt":"2026-11-05T03:55:35.288Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-11-05T03:55:35.319Z","attemptedAt":"2026-11-05T03:55:35.319Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-05T03:55:35.288Z","attemptedAt":"2026-11-05T03:55:35.288Z"}],"evidence":[{"source":"GitHub Advisory Database","id":"GHSA-8hfc-vwv2-85cc","url":"https://github.com/advisories/GHSA-8hfc-vwv2-85cc","modified":"2026-11-05T03:30:39Z","checkedAt":"2026-11-05T03:55:35.288Z"},{"source":"NVD","id":"CVE-2026-48179","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48179","modified":"2026-11-05T03:17:28.130","checkedAt":"2026-11-05T03:55:36.599Z"}],"aiSummary":{"text":"The Exynos modem's IMS stack has a Denial of Service weakness due to improper handling of SDP payload in versions before September 2026. Affected products include Exynos 1080, Exynos 9110, Exynos Modem 5123, Exynos Modem 5300, and Exynos Modem 5400. The weakness is described as CWE-1286.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-05T03:26:07.714Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-48179"}]}}