CVE Catalog

CVE-2026-20519

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.23%

12th percentile - higher than 12% of all known CVEs

Summary

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

Risk Assessment

An attacker could exploit a rogue base station to remotely escalate privileges on the victim's device via the modem. This poses a serious threat to the confidentiality, integrity, and availability of mobile devices in the organization.

Recommendation

Immediately apply the update containing patch MOLY01778993 for the modem. Until deployment, restrict connections to untrusted cellular networks and monitor for unusual base station connections.

Other vulnerabilities in Modem

See all
Original NVD description (English source)

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778993; Issue ID: MSV-8898.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS