CVE-2026-48175: medium-severity vulnerability in Samsung Semiconductor Exynos 1280
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.5epss 0.1%
Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
Samsung Semiconductor · Exynos 1280Samsung Semiconductor · Exynos 1330Samsung Semiconductor · Exynos 1380Samsung Semiconductor · Exynos 1480Samsung Semiconductor · Exynos 1580Samsung Semiconductor · Exynos 2400Samsung Semiconductor · Exynos 2500Samsung Semiconductor · Exynos Modem 5123Samsung Semiconductor · Exynos Modem 5300Samsung Semiconductor · Exynos Modem 5400Samsung Semiconductor · Exynos Modem 5410Related CVEs — Samsung Semiconductor Exynos 1280
In the same product, most dangerous first.