CVE-2026-20450: Medium severity Modem vulnerability
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2026-06-05 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch MOLY01753620
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20450?
The severity of CVE-2026-20450 is classified as critical due to its potential to cause a system crash and remote denial of service.
How do I fix CVE-2026-20450?
To fix CVE-2026-20450, apply the latest security patch provided by the software vendor for the Modem.
What are the potential impacts of CVE-2026-20450?
Potential impacts of CVE-2026-20450 include system crashes and denial of service when a user connects to a malicious base station.
Is user interaction required to exploit CVE-2026-20450?
No, user interaction is not required to exploit CVE-2026-20450.
Who is affected by CVE-2026-20450?
Users of the Modem software who connect to rogue base stations are affected by CVE-2026-20450.