CVE-2026-20406CWE-770

In Modem, there is a possible system crash due to an uncaught exception

Medium · published February 2, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
13.8
In the wild
Unconfirmed
What it is

⚠️ An unhandled exception could bring your system to its knees! This vulnerability in Modem allows an attacker to cause a remote denial of service when a device connects to a rogue base station, all without needing any special permissions. 😱 Think of it like a guest arriving at a hotel and setting off the fire alarm just by being there. No actual fire, but suddenly the whole building is evacuated and chaos ensues! An attacker could exploit this vulnerability to crash connected devices, leading to significant downtime and disruption. With no user interaction needed, it becomes alarmingly easy for malicious actors to wreak havoc remotely without triggering any defenses.

Put simply

Think of it like a guest arriving at a hotel and setting off the fire alarm just by being there. No actual fire, but suddenly the whole building is evacuated and chaos ensues! This issue arises from an uncaught exception in Modem that can be triggered when a user equipment (UE) connects to a compromised base station, allowing remote denial of service without additional privileges required.

What to do

An attacker could exploit this vulnerability to crash connected devices, leading to significant downtime and disruption. With no user interaction needed, it becomes alarmingly easy for malicious actors to wreak havoc remotely without triggering any defenses. To protect against this vulnerability, ensure you apply the patch ID MOLY01726634 as soon as possible. Regularly update your devices and monitor for any suspicious base station connections to stay ahead of potential attacks. You've got this! With the right patch, you can stabilize your system and keep those rogue base stations at bay! 🛡️

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.8th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-02-02T08:14Z
EPSS history
Timeline
  • 02 FEB 08:14Z
    In Modem, there is a possible system crash due to an uncaught exception
    cvelistv5