CVE-2026-20549: Input Validation
Published Nov 1, 2026
·Updated
In Modem, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01775865; Issue ID: MSV-8895.
Affected Software
2 affected componentsFixes available
android/:unknown:>=SoCVersion:0<SoCVersion:2026-11-05
SoCVersion:2026-11-05
Google Android
Event History
Nov 1, 2026
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software
Nov 2, 2026
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
CVE Published
via MITRE·02:33 AM
Data Sourced
via MITRE·02:33 AM
DescriptionWeakness
Data Sourced
via NVD·03:17 AM
DescriptionSeverityWeakness