CVE Catalog

CVE-2026-66085

MediumCVSS 5.5
Published: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.11%

1th percentile - higher than 1% of all known CVEs

Summary

In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges needed.

Risk Assessment

A local attacker could access sensitive data contained in crash dumps, potentially compromising confidentiality. The lack of required privileges increases the risk.

Recommendation

Implement filtering of sensitive data in crash dumps and restrict access to dump files. Update modem software when a fix becomes available.

Other vulnerabilities in Modem

See all
Original NVD description (English source)

In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges needed.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS