CVE Catalog

CVE-2026-20504

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.19%

9th percentile - higher than 9% of all known CVEs

Summary

In the Modem module, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are needed for exploitation.

Risk Assessment

An attacker can remotely cause a system crash, leading to service disruption for network users.

Recommendation

Apply the vendor patch MOLY00755024 (Issue ID: MSV-7865) to fix the missing bounds check.

Other vulnerabilities in Modem

See all
Original NVD description (English source)

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00755024; Issue ID: MSV-7865.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS