CVE-2026-23792: CWE-346 Origin Validation Error in Samsung Exynos 1080 firmware
CVE-2026-23792 is a medium severity vulnerability in Samsung Exynos 1080 and related firmware versions. It involves incorrect handling of unauthenticated downlink RRC Setup messages in the NR RRC component, which can cause the baseband to crash. This affects multiple Samsung mobile processors and modems. The vulnerability does not impact confidentiality or integrity but results in availability loss due to a crash.
AI Analysis
Technical Summary
An origin validation error (CWE-346) was discovered in the NR RRC component of Samsung Mobile Processor and Modem firmware including Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, 5400, and 5410. The issue arises from incorrect handling of unauthenticated downlink RRC Setup messages, which can cause the baseband to crash, leading to denial of service. The CVSS 3.1 score is 4.0 (medium) with network attack vector, high attack complexity, no privileges required, no user interaction, and scope changed. No confidentiality or integrity impact is noted.
Potential Impact
The vulnerability causes a denial of service condition by crashing the baseband when unauthenticated downlink RRC Setup messages are processed incorrectly. There is no impact on confidentiality or integrity. The attack requires network access and has high complexity, limiting exploitability. No known exploits are reported in the wild.
Mitigation Recommendations
No vendor advisory or patch information is provided. Patch status is not yet confirmed — check the Samsung vendor advisory for current remediation guidance. Until a fix is available, monitoring for unusual baseband crashes and applying any official updates when released is recommended.
CVE-2026-23792: CWE-346 Origin Validation Error in Samsung Exynos 1080 firmware
Description
CVE-2026-23792 is a medium severity vulnerability in Samsung Exynos 1080 and related firmware versions. It involves incorrect handling of unauthenticated downlink RRC Setup messages in the NR RRC component, which can cause the baseband to crash. This affects multiple Samsung mobile processors and modems. The vulnerability does not impact confidentiality or integrity but results in availability loss due to a crash.
CVSS v3.1
Score 4.0medium
Affected software
Samsung
Exynos 1080 firmware
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
An origin validation error (CWE-346) was discovered in the NR RRC component of Samsung Mobile Processor and Modem firmware including Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, 5400, and 5410. The issue arises from incorrect handling of unauthenticated downlink RRC Setup messages, which can cause the baseband to crash, leading to denial of service. The CVSS 3.1 score is 4.0 (medium) with network attack vector, high attack complexity, no privileges required, no user interaction, and scope changed. No confidentiality or integrity impact is noted.
Potential Impact
The vulnerability causes a denial of service condition by crashing the baseband when unauthenticated downlink RRC Setup messages are processed incorrectly. There is no impact on confidentiality or integrity. The attack requires network access and has high complexity, limiting exploitability. No known exploits are reported in the wild.
Mitigation Recommendations
No vendor advisory or patch information is provided. Patch status is not yet confirmed — check the Samsung vendor advisory for current remediation guidance. Until a fix is available, monitoring for unusual baseband crashes and applying any official updates when released is recommended.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-01-16T00:00:00.000Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6aa74b1055bf5e2cf5548848
Added to database: 09/14/2026, 01:17:04 UTC
Last enriched: 09/14/2026, 01:31:47 UTC
Last updated: 09/14/2026, 01:31:47 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.