CVE-2026-20457
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
A vulnerability in the Modem component allows remote denial of service due to improper input validation. An attacker can cause a system crash by luring a UE to connect to a rogue base station.
Risk Assessment
The risk involves potential remote disruption of network services for users connected to a malicious base station, leading to communication outages and loss of availability.
Recommendation
Apply the vendor patch MOLY01826924 immediately and implement base station authentication mechanisms to mitigate the risk.
Other vulnerabilities in Modem
See all- CVE-2026-21555High
In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.
- CVE-2026-21554High
In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.
- CVE-2026-21553High
In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.
- CVE-2026-21552High
In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.
- CVE-2026-21551High
In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.
- CVE-2026-21550High
In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.
- CVE-2026-21549High
In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.
- CVE-2026-20479High
In Modem, a missing bounds check could lead to an out-of-bounds read, allowing remote denial of service if the UE connects to a rogue base station controlled by the attacker. No additional privileges or user interaction are needed.
- CVE-2026-20463Medium
In the Modem module, a vulnerability was found that allows privilege escalation through a permissions bypass. This can be exploited locally if the attacker already has System privileges. User interaction is not required for exploitation.
- CVE-2026-20461Medium
In the Modem module, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are needed for exploitation.
Original NVD description (English source)
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01826924; Issue ID: MSV-7301.

