CVE-2026-20405CWE-617

In Modem, there is a possible system crash due to a missing bounds check

Medium · published February 2, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
14.4
In the wild
Unconfirmed
What it is

⚠️ A rogue base station could crash your system, and attackers don’t even need a password! Think of it like a party crasher who takes over the entire sound system, blasting noise and leaving the guests in disbelief — that’s precisely what this vulnerability does to your network connection. An attacker could set up a malicious base station, causing all connected devices to face a denial of service, leaving users unable to make calls or access the internet. While this might not lead to data breaches, the disruption could be absolutely frustrating for anyone relying on their connection.

Put simply

Think of it like a party crasher who takes over the entire sound system, blasting noise and leaving the guests in disbelief — that’s precisely what this vulnerability does to your network connection. This vulnerability in Modem arises from a missing bounds check, allowing an attacker to exploit it simply by connecting to a rogue base station without needing any special privileges or user interaction.

What to do

An attacker could set up a malicious base station, causing all connected devices to face a denial of service, leaving users unable to make calls or access the internet. While this might not lead to data breaches, the disruption could be absolutely frustrating for anyone relying on their connection. To mitigate this issue, ensure that you apply the patch (ID: MOLY01688495) as soon as possible. Regularly check for updates on your device to stay protected against potential exploits. Additionally, be cautious when connecting to unknown base stations. You've got this! Patch up and keep your connections secure! 🛡️

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00241 · 14.4th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2026-02-02T08:14Z
EPSS history
Timeline
  • 02 FEB 08:14Z
    In Modem, there is a possible system crash due to a missing bounds check
    cvelistv5