Modem vulnerabilities
44 known CVE vulnerabilities in Modem, translated and rated.
- CVE-2026-66085Medium
In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges needed.
- CVE-2026-20543Medium
In the Modem component, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-20541Medium
In the Modem component, there is a possible out-of-bounds read due to a missing permission check. This could lead to remote denial of service if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-20540Medium
In the Modem component, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-20539Medium
In the Modem module, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not required for exploitation.
- CVE-2026-20538Medium
In the Modem module, there is a possible out-of-bounds read due to a missing permission check. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not required for exploitation.
- CVE-2026-20534Medium
In the Modem module, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not required for exploitation.
- CVE-2026-20527Medium
In the Modem component, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are needed.
- CVE-2026-20526High
In the Modem component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote privilege escalation if a UE connects to a rogue base station controlled by the attacker. User interaction is needed, but no additional execution privileges are required.
- CVE-2026-20525Medium
In the Modem component, there is a possible system crash due to improper input validation. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are needed.
- CVE-2026-20520High
In the Modem component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote privilege escalation if a UE connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are needed.
- CVE-2026-20519High
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-57008High
In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-20504Medium
In the Modem module, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are needed for exploitation.
- CVE-2026-20503Medium
In the Modem module, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are needed for exploitation.
- CVE-2026-20500Medium
In the Modem module, there is a possible system crash due to improper input validation. This could lead to local denial of service, but requires user execution privileges and user interaction.
- CVE-2026-21555High
In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.
- CVE-2026-21554High
In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.
- CVE-2026-21553High
In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.
- CVE-2026-21552High
In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.
- CVE-2026-21551High
In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.
- CVE-2026-21550High
In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.
- CVE-2026-21549High
In modem, there is a possible improper input validation, which could lead to remote denial of service without additional privileges.
- CVE-2026-20479High
In Modem, a missing bounds check could lead to an out-of-bounds read, allowing remote denial of service if the UE connects to a rogue base station controlled by the attacker. No additional privileges or user interaction are needed.
- CVE-2026-20463Medium
In the Modem module, a vulnerability was found that allows privilege escalation through a permissions bypass. This can be exploited locally if the attacker already has System privileges. User interaction is not required for exploitation.
- CVE-2026-20461Medium
In the Modem module, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are needed for exploitation.
- CVE-2026-20460Medium
In the Modem module, there is a vulnerability leading to information disclosure due to improper input validation. An attacker can remotely disclose information if the user equipment (UE) connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are required for exploitation.
- CVE-2026-20459Medium
A vulnerability in the Modem component allows remote denial of service due to improper input validation. An attacker can cause a system crash by using a rogue base station without requiring user interaction.
- CVE-2026-20458High
In the Modem module, a possible memory corruption due to a missing bounds check could lead to remote escalation of privilege if a UE connects to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not required for exploitation.
- CVE-2026-20457Medium
A vulnerability in the Modem component allows remote denial of service due to improper input validation. An attacker can cause a system crash by luring a UE to connect to a rogue base station.
- CVE-2026-0164High
In the modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed.
- CVE-2026-0154High
In the modem, there is a possible way to trigger a modem crash during a SIP REFER request due to memory corruption. This could lead to remote code execution with no additional execution privileges needed.
- CVE-2026-0139High
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed.
- CVE-2026-0136High
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed.
- CVE-2026-0135High
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed.
- CVE-2026-0132High
In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed.
- CVE-2026-20432High
In the Modem component, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote escalation of privilege if a UE connects to a rogue base station controlled by the attacker. User interaction is required for exploitation.
- CVE-2026-20431Medium
In Modem, there is a possible system crash due to a logic error, which could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker. No additional execution privileges or user interaction needed.
- CVE-2025-20794Medium
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2025-20793Medium
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2025-20762Medium
In the Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2025-20761Medium
In the Modem component, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker, with no additional execution privileges or user interaction needed.
- CVE-2025-20760Medium
In the Modem, there is a possible read of uninitialized heap data due to an uncaught exception. This could lead to remote denial of service if a UE connects to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2025-20755Medium
In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

