CVE Catalog

CVE-2026-20534

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.18%

7th percentile - higher than 7% of all known CVEs

Summary

In the Modem module, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not required for exploitation.

Risk Assessment

The risk to the organization is potential remote denial of service that could disrupt devices using the modem. The attacker can exploit the vulnerability without user interaction, increasing the risk.

Recommendation

Apply patch MOLY01797547 (Issue ID: MSV-9155) to the Modem module. Also monitor cellular connections for suspicious base stations.

Other vulnerabilities in Modem

See all
Original NVD description (English source)

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01797547; Issue ID: MSV-9155.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS