CVE-2026-23792: Unauth RRC Setup Baseband Crash in Samsung

Summary of Key Vulnerability Information Vulnerability Overview CVE ID: CVE-2026-23792 Description: Improper handling of unauthenticated downlink RRC Setup messages may lead to a baseband crash. Severity: Medium Report Date: 2025-10-22 Acknowledgment: Denis Kraemer / University of Applied Sciences Upper Austria, Campus Hagenberg Scope of Impact Affected Products: Galaxy S25, S25+, S25 Ultra, S24, S24+, S24 Ultra, S23, S23+, S23 Ultra, S22, S22+, S22 Ultra, S21, S21+, S21 Ultra, S20, S20+, S20 Ultra, S10, S10+, S10e, S10 5G, S9, S9+, S8, S8+, S8, S8+, S7, S7+, S6, S6+, S5, S5+, S4, S4+, S3, S3+, S2, S2+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S1, S1+, S

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-23792: Unauth RRC Setup Baseband Crash in Samsung