CVE-2026-48174

CVSS 9.8 (critical) · published 2026-11-05

In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

Weakness: CWE-476

Source: NVD CVE-2026-48174

References

• https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.