Samsung Semiconductor Exynos W930 NAS Message length memory corruption

Summaryinfo

A vulnerability was found in Samsung Semiconductor Exynos 850, Exynos 1280, Exynos 1330, Exynos 1380, Exynos 1480, Exynos 1580, Exynos 1680, Exynos 2100, Exynos 2200, Exynos 2400, Exynos 2500, Exynos 5123, Exynos 5300, Exynos 5400, Exynos 5410, Exynos 9110, Exynos W1000, Exynos W920 and Exynos W930 and classified as critical. This impacts an unknown function of the component NAS Message Handler. Such manipulation of the argument length leads to memory corruption. This vulnerability is referenced as CVE-2026-48173. It is possible to launch the attack remotely. No exploit is available.

Detailsinfo

A vulnerability was found in Samsung Semiconductor Exynos 850, Exynos 1280, Exynos 1330, Exynos 1380, Exynos 1480, Exynos 1580, Exynos 1680, Exynos 2100, Exynos 2200, Exynos 2400, Exynos 2500, Exynos 5123, Exynos 5300, Exynos 5400, Exynos 5410, Exynos 9110, Exynos W1000, Exynos W920 and Exynos W930 and classified as critical. Affected by this issue is an unknown code of the component NAS Message Handler. The manipulation of the argument length with an unknown input leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is confidentiality, integrity, and availability. CVE summarizes:

In the NAS message handler, improper validation of the length field in NAS message causes memory corruption

The advisory is available at semiconductor.samsung.com. This vulnerability is handled as CVE-2026-48173 since 05/21/2026. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. Technical details are known, but there is no available exploit. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 11/05/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• Samsung Semiconductor

Name

• Exynos 850
• Exynos 1280
• Exynos 1330
• Exynos 1380
• Exynos 1480
• Exynos 1580
• Exynos 1680
• Exynos 2100
• Exynos 2200
• Exynos 2400
• Exynos 2500
• Exynos 5123
• Exynos 5300
• Exynos 5400
• Exynos 5410
• Exynos 9110
• Exynos W920
• Exynos W930
• Exynos W1000

License

• commercial

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion