CVE-2026-20404CWE-787

In Modem, there is a possible system crash due to improper input validation

Medium · published February 2, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
41.6
In the wild
Unconfirmed
What it is

⚠️ A rogue base station can bring your system down without breaking a sweat! This input validation flaw in Modem can lead to a remote denial of service, and the best part? No user interaction needed! Think of it like a prankster who sets off a fire alarm in a building — everyone panics and has to evacuate, but they didn’t even have to enter the building to cause chaos. That’s exactly what this vulnerability does to your system! An attacker could set up a rogue base station, causing connected devices to crash, making the service temporarily unavailable. Imagine losing your connection just when you need it most — frustrating, right? This denial of service could disrupt critical operations without any advanced skills needed from the attacker.

Put simply

Think of it like a prankster who sets off a fire alarm in a building — everyone panics and has to evacuate, but they didn’t even have to enter the building to cause chaos. That’s exactly what this vulnerability does to your system! This vulnerability arises from improper input validation in the Modem component, allowing an attacker to exploit a device linked to a malicious base station, resulting in a denial of service without any additional execution privileges.

What to do

An attacker could set up a rogue base station, causing connected devices to crash, making the service temporarily unavailable. Imagine losing your connection just when you need it most — frustrating, right? This denial of service could disrupt critical operations without any advanced skills needed from the attacker. To protect against this vulnerability, make sure to apply the patch ID MOLY01689248 as soon as possible. Regularly update your systems and review connected base station configurations to ensure they are legitimate. Stay vigilant! You can tackle this! By following these steps, you’ll have your systems secured in no time. 🛡️

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00495 · 41.6th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-02-02T08:14Z
EPSS history
Timeline
  • 02 FEB 08:14Z
    In Modem, there is a possible system crash due to improper input validation
    cvelistv5