CVE-2026-20503: Security vulnerability
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01371002; Issue ID: MSV-9020.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch MOLY01371002
Event History
Frequently Asked Questions
What conditions must be met for exploitation?
A UE must connect to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are required.
What is the expected impact?
Successful exploitation can cause a system crash, resulting in remote denial of service.
Which vendor tracking identifiers can be used to locate the fix?
The patch is identified as MOLY01371002, and the associated issue ID is MSV-9020.