CVE-2026-20403CWE-787

In Modem, there is a possible system crash due to a missing bounds check

Medium · published February 2, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
14.4
In the wild
Unconfirmed
What it is

⚠️ A missing bounds check in Modem could lead to a system crash from a rogue base station — no user clicks required! Think of it like a hotel front desk that doesn't check how many guests are meant to stay in a room. If too many show up, it could get chaotic and lead to a major issue! This vulnerability could enable an attacker to crash the system, resulting in a denial of service for connected devices. Picture a traffic jam where no cars can move, causing frustration and downtime for services that rely on the modem. Yikes!

Put simply

Think of it like a hotel front desk that doesn't check how many guests are meant to stay in a room. If too many show up, it could get chaotic and lead to a major issue! The issue arises from a missing bounds check that allows attackers to exploit connected user equipment (UE) from a rogue base station without needing any execution privileges.

What to do

This vulnerability could enable an attacker to crash the system, resulting in a denial of service for connected devices. Picture a traffic jam where no cars can move, causing frustration and downtime for services that rely on the modem. Yikes! To protect your systems, ensure you patch to the latest versions: MOLY01689254 for N15 and NR16, or MOLY01689259 for NR17 and NR17R. This should be a priority to avoid potential service interruptions! You've got this! Stay proactive, apply those patches, and keep your systems running smoothly! 🛡️

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00241 · 14.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-02-02T08:14Z
EPSS history
Timeline
  • 02 FEB 08:14Z
    In Modem, there is a possible system crash due to a missing bounds check
    cvelistv5