CVE-2026-48179
Received Received - Intake

Denial of Service in Exynos Modem IMS Stack

Vulnerability report for CVE-2026-48179, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-11-05

Last updated on: 2026-11-05

Assigner: a8bfbd5c-5645-475e-a8f4-6c140c17bd29

Description

In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-05
Last Modified
2026-11-05
Generated
2026-11-05
AI Q&A
2026-11-05
EPSS Evaluated
N/A
NVD
EUVD

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1286 The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Exynos modem's IMS stack where improper handling of SDP payload causes a Denial of Service. This means an attacker could send malformed SDP payloads to crash or disrupt the modem's functionality.

Impact Analysis

If exploited, this vulnerability could cause your device's modem to stop working, leading to loss of network connectivity, dropped calls, or inability to send/receive messages. It may require a device restart to recover.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-48179. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...