CVE Catalog

CVE-2026-20450

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.29%

22th percentile - higher than 22% of all known CVEs

Summary

In the Modem component, a possible system crash exists due to incorrect error handling. This could lead to remote denial of service if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed and no user interaction required.

Risk Assessment

An attacker could remotely cause service unavailability via a rogue base station, disrupting device communication.

Recommendation

Apply patch MOLY01753620 provided by the vendor.

Other vulnerabilities in Modem

See all
Original NVD description (English source)

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS