CVE-2026-20554

HighCVSS 7.1/10Last modified Nov 3, 2026

Description

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01911177; Issue ID: MSV-10122.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 2, 2026
Last modified
Nov 3, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-205555.3In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has conCVE-2026-205567.5In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE CVE-2026-205577.5In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE CVE-2026-205588.4In GPU pdma, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege with no addCVE-2026-205597.8In GPU pdma, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with User executiCVE-2026-20567.5A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of tCVE-2026-205605.3In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connecCVE-2026-205615.3In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has coCVE-2026-205625.3In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has coCVE-2026-205635.3In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service, if a UE hasCVE-2026-205646.2In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with no additCVE-2026-205658.4In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no
CVE-2026-20554: High severity, CVSS 7.1 | Vulnix