CVE-2026-0154

In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.

In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.

In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.

In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.

In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.

In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.

In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.

In Modem, a missing bounds check could lead to an out-of-bounds read, allowing remote denial of service if the UE connects to a rogue base station controlled by the attacker. No additional privileges or user interaction are needed.

In the Modem module, a vulnerability was found that allows privilege escalation through a permissions bypass. This can be exploited locally if the attacker already has System privileges. User interaction is not required for exploitation.

In the Modem module, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are needed for exploitation.