CVE-2026-20504: Security vulnerability
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00755024; Issue ID: MSV-7865.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch MOLY00755024
Event History
Frequently Asked Questions
What conditions must be present for exploitation?
A UE must connect to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are required.
What is the likely impact of successful exploitation?
Successful exploitation can cause a system crash, resulting in remote denial of service.
How can this issue be tracked in vendor remediation?
The vendor identifies the fix as Patch ID MOLY00755024 and tracks the issue as MSV-7865.