CVE-2026-33958
Received Received - Intake

RRC Reconfiguration Message OOB Access DoS

Publication date: 2026-11-05

Last updated on: 2026-11-05

Assigner: a8bfbd5c-5645-475e-a8f4-6c140c17bd29

Description
Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-service (DoS) condition.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-05
Last Modified
2026-11-05
Generated
2026-11-05
AI Q&A
2026-11-05
EPSS Evaluated
N/A
NVD
CVE-2026-33958
EUVD
EUVD-2026-117277

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1286 The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a malformed RRC Reconfiguration message causing an out-of-bounds access in affected Samsung Exynos chipsets. This leads to a denial-of-service condition where the system may crash or become unresponsive.

Impact Analysis

The vulnerability can cause your device to freeze or reboot unexpectedly when processing a malformed network message. This disrupts normal device functionality and may lead to loss of connectivity or data.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-33958. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...