CVE Catalog

CVE-2026-20541

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.18%

7th percentile - higher than 7% of all known CVEs

Summary

In the Modem component, there is a possible out-of-bounds read due to a missing permission check. This could lead to remote denial of service if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

Risk Assessment

Risk of remote denial of service, potentially disrupting network or device operation.

Recommendation

Apply patch MOLY01774038 (Issue ID: MSV-8911) as soon as possible.

Other vulnerabilities in Modem

See all
Original NVD description (English source)

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8911.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS