CVE-2026-20461

In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.

In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.

In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.

In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.

In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.

In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.

In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.

In Modem, a missing bounds check could lead to an out-of-bounds read, allowing remote denial of service if the UE connects to a rogue base station controlled by the attacker. No additional privileges or user interaction are needed.

In the Modem module, a vulnerability was found that allows privilege escalation through a permissions bypass. This can be exploited locally if the attacker already has System privileges. User interaction is not required for exploitation.

In the Modem module, there is a vulnerability leading to information disclosure due to improper input validation. An attacker can remotely disclose information if the user equipment (UE) connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are required for exploitation.