CVE-2026-50207

HighCVSS 7.8

Published: 04/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

The system Binder accepts unverified AT commands, allowing local applications to read baseband files or disable cellular connectivity.

Risk Assessment

A local application can access sensitive baseband data or disrupt cellular connectivity, posing a confidentiality and availability risk.

Recommendation

Apply the vendor patch for the Binder system that adds verification of AT commands.

Other vulnerabilities in Binder

CVE-2016-8468High
A vulnerability in Binder allows a local malicious application to execute arbitrary code within the context of a privileged process. It requires compromising a privileged process first, which mitigates the risk.

Original NVD description (English source)

The system Binder boundary accepts unverified pass-through AT commands, giving local applications the power to read baseband files or disable cellular connectivity.