CVE-2025-20726CWE-122

In Modem, there is a possible out of bounds write due to an incorrect bounds check

High · published November 4, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
42.9
In the wild
Unconfirmed
What it is

⚡ A sneaky out-of-bounds write is lurking in Modem, ready to pounce if you're connected to a rogue base station! 🔥 Think of it like a hotel where the front desk neglects to check if guests have valid reservations. An uninvited 'guest' could just stroll into the penthouse suite and throw a party without anyone stopping them! If an attacker sets up a rogue base station, they could gain unauthorized access, allowing them to escalate their privileges and control over the device. Imagine the chaos if they could access sensitive information or take over essential functions without breaking a sweat!

Put simply

Think of it like a hotel where the front desk neglects to check if guests have valid reservations. An uninvited 'guest' could just stroll into the penthouse suite and throw a party without anyone stopping them! This vulnerability arises from an improper bounds check, enabling an attacker to write data outside the allocated memory space. If a User Equipment (UE) connects to the malicious base station, they can exploit this flaw without needing additional execution privileges.

What to do

If an attacker sets up a rogue base station, they could gain unauthorized access, allowing them to escalate their privileges and control over the device. Imagine the chaos if they could access sensitive information or take over essential functions without breaking a sweat! To shield against this vulnerability, immediately patch your Modem component with the update ID: MOLY01672598. It's vital to ensure that your devices are not connecting to untrusted base stations — a proactive approach can help mitigate risks! You've got this! With the right updates in place, you'll be securing your network like a pro. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00513 · 42.9th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2025-11-04T06:19Z
EPSS history
Timeline
  • 04 NOV 06:19Z
    In Modem, there is a possible out of bounds write due to an incorrect bounds check
    cvelistv5