CVE-2026-66085: Information Disclosure in Modem
Published Oct 12, 2026
·Updated
In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges needed.
Affected Software
1 affected component
Modem
Event History
Oct 12, 2026
CVE Published
via MITRE·01:28 AM
Data Sourced
via MITRE·01:28 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to this issue?
Local users with low privileges on affected modem software are the relevant exposure group. The issue does not require user interaction or additional execution privileges.
2
What does an attacker need to exploit it?
An attacker needs local access and low-level privileges. Exploitation involves accessing crash dumps that lack filtering for sensitive data.
3
What is the impact of successful exploitation?
Successful exploitation can disclose sensitive information contained in modem crash dumps. The provided severity vector indicates no integrity or availability impact.