CVE-2026-35494
Unknown
Description
In the baseband, memory corruption during NAS packet processing can cause a denial of service.
SeverityUnknown
CVSS—
Exploit probability3. percentile0.1%
ProductExynos 1280
PublishedNov 5, 2026
First seenNov 5, 2026
Weakness typeCWE-787Out-of-bounds write
How to fix
Update
- Samsung Semiconductor Exynos 1280October 2026 or later
- Samsung Semiconductor Exynos 2200October 2026 or later
- Samsung Semiconductor Exynos 1330October 2026 or later
- Samsung Semiconductor Exynos 1380October 2026 or later
- Samsung Semiconductor Exynos 2400October 2026 or later
- Samsung Semiconductor Exynos W920October 2026 or later
- Samsung Semiconductor Exynos W930October 2026 or later
- Samsung Semiconductor Exynos Modem 5123October 2026 or later
- Samsung Semiconductor Exynos Modem 5300October 2026 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Semiconductor Exynos 1280 | v < October 2026 | October 2026 |
| Samsung Semiconductor Exynos 2200 | v < October 2026 | October 2026 |
| Samsung Semiconductor Exynos 1330 | v < October 2026 | October 2026 |
| Samsung Semiconductor Exynos 1380 | v < October 2026 | October 2026 |
| Samsung Semiconductor Exynos 2400 | v < October 2026 | October 2026 |
| Samsung Semiconductor Exynos W920 | v < October 2026 | October 2026 |
| Samsung Semiconductor Exynos W930 | v < October 2026 | October 2026 |
| Samsung Semiconductor Exynos Modem 5123 | v < October 2026 | October 2026 |
| Samsung Semiconductor Exynos Modem 5300 | v < October 2026 | October 2026 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.