CVE-2026-20547: High severity Google Android vulnerability

Q: What does an attacker need to exploit this issue?

The target UE must connect to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are required.

Q: Who is exposed?

Devices using the affected Modem component are exposed when they can be induced to connect to an attacker-controlled rogue base station. The provided data identifies Google Android but does not list affected device models or software versions.

Q: What is the impact if exploitation succeeds?

Successful exploitation can result in remote escalation of privilege through an out-of-bounds write in the modem. The supplied severity vector indicates high impacts to confidentiality, integrity, and availability.

Q: How can I identify the relevant fix?

The listed patch identifiers are MOLY01874018 and MOLY01774038, and the issue identifier is MSV-9802. Consult the referenced November 2026 vendor and Android security bulletins to determine whether a device build includes the fix.

Published Nov 1, 2026

Updated

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01874018 / MOLY01774038; Issue ID: MSV-9802.

Affected Software

2 affected componentsFixes available

android/:unknown:>=SoCVersion:0<SoCVersion:2026-11-05

SoCVersion:2026-11-05

Google Android

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade android/:unknown: to a version that resolves this vulnerability.
Fixed in SoCVersion:2026-11-05
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch MOLY01874018
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch MOLY01774038

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Nov 2, 2026

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityAffected Software

CVE Published

via MITRE·02:33 AM

Data Sourced

via MITRE·02:33 AM

DescriptionWeakness

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The target UE must connect to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are required.

Who is exposed?

Devices using the affected Modem component are exposed when they can be induced to connect to an attacker-controlled rogue base station. The provided data identifies Google Android but does not list affected device models or software versions.

What is the impact if exploitation succeeds?

Successful exploitation can result in remote escalation of privilege through an out-of-bounds write in the modem. The supplied severity vector indicates high impacts to confidentiality, integrity, and availability.

How can I identify the relevant fix?

The listed patch identifiers are MOLY01874018 and MOLY01774038, and the issue identifier is MSV-9802. Consult the referenced November 2026 vendor and Android security bulletins to determine whether a device build includes the fix.

CVE-2026-20547: High severity Google Android vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Who is exposed?

What is the impact if exploitation succeeds?

How can I identify the relevant fix?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Who is exposed?

What is the impact if exploitation succeeds?

How can I identify the relevant fix?