CVE-2025-66366

CVSS 7.5 (high) · published 2026-11-05

Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash

Weakness: CWE-129

Source: NVD CVE-2025-66366

References

• https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.