CVE-2026-20598: Integer Overflow

Published Nov 2, 2026

Updated

In Modem, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01755742; Issue ID: MSV-8896.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Modem to a version that resolves this vulnerability.
Patch MOLY01755742

Event History

Nov 2, 2026

CVE Published

via NVD·03:17 AM

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What conditions must be met for exploitation?

A UE must connect to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are required.

What is the expected impact if exploitation succeeds?

The issue can cause a remote denial of service. The provided information does not indicate confidentiality or integrity impact.

How can this issue be tracked with the vendor?

The vendor identifiers are Patch ID MOLY01755742 and Issue ID MSV-8896.

CVE-2026-20598: Integer Overflow

Remediation

Event History

Frequently Asked Questions

What conditions must be met for exploitation?

What is the expected impact if exploitation succeeds?

How can this issue be tracked with the vendor?

Company

Resources

Contact

Frequently Asked Questions

What conditions must be met for exploitation?

What is the expected impact if exploitation succeeds?

How can this issue be tracked with the vendor?