CVE-2026-20578: Medium severity vulnerability
Published Nov 2, 2026
·Updated
In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01879164; Issue ID: MSV-9846.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch MOLY01879164
Event History
Nov 2, 2026
CVE Published
via NVD·03:17 AM
Data Sourced
via NVD·03:17 AM
DescriptionSeverityWeakness