CVE-2026-20546

HighCVSS 7.5/10Last modified Nov 3, 2026

Description

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01876654 / MOLY01774038; Issue ID: MSV-9803.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 2, 2026
Last modified
Nov 3, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-205477.5In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE CVE-2026-205487.5In Modem, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege, if a UE hasCVE-2026-205497.5In Modem, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege, if a CVE-2026-20557.5A weakness has been identified in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The affected element is an unknown function of the componentCVE-2026-205506.2In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additionaCVE-2026-205515.5In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additionaCVE-2026-205526.5In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additionCVE-2026-205536.8In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attackCVE-2026-205547.1In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has conCVE-2026-205555.3In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has conCVE-2026-205567.5In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE CVE-2026-205577.5In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE
CVE-2026-20546: High severity, CVSS 7.5 | Vulnix