Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2026-33958 Details
Description
Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.
A vulnerability exists in the Samsung Cellular Modem that allows processing of a malformed RRC Reconfiguration message to cause out-of-bounds access. This flaw results in a denial-of-service condition.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Nov 5, 2026Exploitation: NoneAutomatable: NoTechnical Impact: Partial
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://semiconductor.samsung.com/support/quality-support/product-security-updates/ | a8bfbd5c-5645-475e-a8f4-6c140c17bd29 | BundleVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-1286 | Improper Validation of Syntactic Correctness of Input | a8bfbd5c-5645-475e-a8f4-6c140c17bd29 |
Affected Products
| Product | Versions |
|---|---|
| 3GPP 5G NR | All versions |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 5, 2026 | New CVE Received | a8bfbd5c-5645-475e-a8f4-6c140c17bd29 |
Volerion