CVE-2026-20431
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
In Modem, there is a possible system crash due to a logic error, which could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction needed.
Risk Assessment
An attacker can cause a system crash (DoS) by forcing the device to connect to a rogue base station.
Recommendation
Apply patch MOLY01106496 or update the modem software.
Original NVD description (English source)
In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467.