CVE-2026-20500: Input Validation
In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2026-09-05 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch MOLY01810811
Event History
Frequently Asked Questions
What level of access and interaction are required to exploit this issue?
An attacker needs User-level execution privileges on the affected device, and user interaction is required for exploitation.
What is the expected impact if exploitation succeeds?
Successful exploitation can cause a system crash, resulting in a local denial of service.
How can I identify the vendor fix associated with this issue?
The provided patch identifier is MOLY01810811, and the related issue identifier is MSV-9232.