CVE-2026-79405: Improper Input Validation in Modem Firmware

Q: What access does an attacker need to trigger this issue?

The issue is remotely reachable and requires no privileges or user interaction. Exploitation does not require additional execution privileges.

Q: What is the expected impact of successful exploitation?

Successful exploitation can cause a system crash, resulting in denial of service. The supplied severity vector indicates no confidentiality or integrity impact.

Q: Which devices or configurations are confirmed to be affected?

The provided information identifies Google Android and modem firmware, but does not specify affected device models, Android versions, modem firmware versions, or configuration prerequisites.

Published Nov 1, 2026

Updated

In Modem Firmware, there is a possible system crash due to improper input validation of dedicated PUCCH configuration. This could lead to remote denial of service with no additional execution privileges needed.

Affected Software

2 affected componentsFixes available

android/:unknown:>=SoCVersion:0<SoCVersion:2026-11-05

SoCVersion:2026-11-05

Google Android

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade android/:unknown: to a version that resolves this vulnerability.
Fixed in SoCVersion:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Nov 2, 2026

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityAffected Software

Nov 4, 2026

CVE Published

via MITRE·03:20 AM

Data Sourced

via MITRE·03:20 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to trigger this issue?

The issue is remotely reachable and requires no privileges or user interaction. Exploitation does not require additional execution privileges.

What is the expected impact of successful exploitation?

Successful exploitation can cause a system crash, resulting in denial of service. The supplied severity vector indicates no confidentiality or integrity impact.

Which devices or configurations are confirmed to be affected?

The provided information identifies Google Android and modem firmware, but does not specify affected device models, Android versions, modem firmware versions, or configuration prerequisites.

CVE-2026-79405: Improper Input Validation in Modem Firmware

Affected Software

Remediation

Event History

Frequently Asked Questions

What access does an attacker need to trigger this issue?

What is the expected impact of successful exploitation?

Which devices or configurations are confirmed to be affected?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to trigger this issue?

What is the expected impact of successful exploitation?

Which devices or configurations are confirmed to be affected?