CVE Catalog

CVE-2026-20479

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.50%

41th percentile - higher than 41% of all known CVEs

Summary

In Modem, a missing bounds check could lead to an out-of-bounds read, allowing remote denial of service if the UE connects to a rogue base station controlled by the attacker. No additional privileges or user interaction are needed.

Risk Assessment

An attacker with a rogue base station could disrupt modem operation, causing loss of network connectivity.

Recommendation

Apply patch MOLY00741071 which adds bounds checking.

Other vulnerabilities in Modem

See all
Original NVD description (English source)

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00741071; Issue ID: MSV-7620.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS