CVE-2026-20560: Input Validation
Published Nov 1, 2026
·Updated
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01870543; Issue ID: MSV-9070.
Affected Software
2 affected componentsFixes available
android/:unknown:>=SoCVersion:0<SoCVersion:2026-11-05
SoCVersion:2026-11-05
Google Android
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2026-11-05 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch MOLY01870543
Event History
Nov 1, 2026
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software
Nov 2, 2026
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Data Sourced
via NVD·03:17 AM
DescriptionSeverityWeakness