Is CVE-2026-33970 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-33970?

CVE-2026-33970 has a CVSS v3 severity of LOW (3.5).

Back

CVE-2026-33970

Description

An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, W920, W930, W1000, and Modem 5410. In the 5G baseband, a NULL Pointer Dereference occurs when processing a malformed RRC Reconfiguration message.