{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-35495", "assignerOrgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29", "state": "PUBLISHED", "assignerShortName": "samsungsemiconductor", "dateReserved": "2026-04-02T20:57:09.187Z", "datePublished": "2026-11-05T02:36:51.302Z", "dateUpdated": "2026-11-05T02:36:51.302Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-754", "description": "CWE-754", "type": "CWE"}]}], "affected": [{"vendor": "Samsung Semiconductor", "product": "Exynos 1080", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos 9110", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos Modem 5123", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos Modem 5300", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}, {"vendor": "Samsung Semiconductor", "product": "Exynos Modem 5400", "versions": [{"status": "affected", "version": "0", "lessThan": "October 2026", "versionType": "date"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<span style=\"background-color: rgb(255, 255, 255);\">In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability</span>"}]}], "references": [{"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"}], "providerMetadata": {"orgId": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29", "shortName": "samsungsemiconductor", "dateUpdated": "2026-11-05T02:36:51.302Z"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Exynos 1080", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos 9110", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos Modem 5123", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos Modem 5300", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}, {"defaultStatus": "unaffected", "product": "Exynos Modem 5400", "vendor": "Samsung Semiconductor", "versions": [{"lessThan": "October 2026", "status": "affected", "version": "0", "versionType": "date"}]}], "source": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability"}], "id": "CVE-2026-35495", "lastModified": "2026-11-05T03:17:27.057", "metrics": {}, "published": "2026-11-05T03:17:27.057", "references": [{"source": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29", "url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/"}], "sourceIdentifier": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-754"}], "source": "a8bfbd5c-5645-475e-a8f4-6c140c17bd29", "type": "Secondary"}]}

{}

{"created": "2026-11-05T04:00:15.837655+00:00", "title": "Improper SIP Packet Handling Causing Access Control Bypass in Samsung Exynos IMS Stack", "updated": "2026-11-05T04:00:15.837661+00:00", "vendors": []}