Samsung Semiconductor NAS handler length validation leads to memory corruption
CVE-2026-48173 Published on November 5, 2026

In the NAS message handler, improper validation of the length field in NAS message causes memory corruption

NVD

Weakness Type

What is a Classic Buffer Overflow Vulnerability?

The program copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. A buffer overflow condition exists when a program attempts to put more data in a buffer than it can hold, or when a program attempts to put data in a memory area outside of the boundaries of a buffer. The simplest type of error, and the most common cause of buffer overflows, is the "classic" case in which the program copies the buffer without restricting how much is copied. Other variants exist, but the existence of a classic overflow strongly suggests that the programmer is not considering even the most basic of security protections.

CVE-2026-48173 has been classified to as a Classic Buffer Overflow vulnerability or weakness.


Affected Versions

Samsung Semiconductor Exynos 850: Samsung Semiconductor Exynos 2100: Samsung Semiconductor Exynos 1280: Samsung Semiconductor Exynos 2200: Samsung Semiconductor Exynos 1330: Samsung Semiconductor Exynos 1380: Samsung Semiconductor Exynos 1480: Samsung Semiconductor Exynos 2400: Samsung Semiconductor Exynos 1580: Samsung Semiconductor Exynos 2500: Samsung Semiconductor Exynos 1680: Samsung Semiconductor Exynos 9110: Samsung Semiconductor Exynos W920: Samsung Semiconductor Exynos W930: Samsung Semiconductor Exynos W1000: Samsung Semiconductor Exynos Modem 5123: Samsung Semiconductor Exynos Modem 5300: Samsung Semiconductor Exynos Modem 5400: Samsung Semiconductor Exynos Modem 5410: