CVE-2026-20563: Medium severity Google Android vulnerability

Q: Who is exposed to this issue?

Devices using the affected Android modem component are exposed when they connect to a rogue base station controlled by an attacker. The attack is network-adjacent and does not require attacker authentication or user interaction.

Q: What does an attacker need to exploit it?

The attacker needs to operate or control a rogue base station that a UE connects to. No additional execution privileges are required.

Q: What is the expected impact?

Successful exploitation can cause a remote denial of service through an out-of-bounds write in the modem. The provided severity vector indicates no confidentiality or integrity impact, with availability impact only.

Q: How can I identify the relevant fix?

The vendor tracking identifiers are Patch ID MOLY01777997 and Issue ID MSV-8905. The referenced November 2026 MediaTek and Android security bulletins provide the associated remediation information.

Published Nov 1, 2026

Updated

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01777997; Issue ID: MSV-8905.

Affected Software

2 affected componentsFixes available

android/:unknown:>=SoCVersion:0<SoCVersion:2026-11-05

SoCVersion:2026-11-05

Google Android

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade android/:unknown: to a version that resolves this vulnerability.
Fixed in SoCVersion:2026-11-05
Upgrade
Upgrade Modem to a version that resolves this vulnerability.
Patch MOLY01777997

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Nov 2, 2026

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityAffected Software

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Devices using the affected Android modem component are exposed when they connect to a rogue base station controlled by an attacker. The attack is network-adjacent and does not require attacker authentication or user interaction.

What does an attacker need to exploit it?

The attacker needs to operate or control a rogue base station that a UE connects to. No additional execution privileges are required.

What is the expected impact?

Successful exploitation can cause a remote denial of service through an out-of-bounds write in the modem. The provided severity vector indicates no confidentiality or integrity impact, with availability impact only.

How can I identify the relevant fix?

The vendor tracking identifiers are Patch ID MOLY01777997 and Issue ID MSV-8905. The referenced November 2026 MediaTek and Android security bulletins provide the associated remediation information.

CVE-2026-20563: Medium severity Google Android vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the expected impact?

How can I identify the relevant fix?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the expected impact?

How can I identify the relevant fix?