CVE-2026-20420CWE-125

In Modem, there is a possible system crash due to incorrect error handling

Medium · published February 2, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
14.4
In the wild
Unconfirmed
What it is

⚠️ Just one rogue base station could crash your system! This vulnerability in Modem’s error handling lets attackers cause a remote denial of service without needing any special permissions. 🔥 Think of this like a mischievous neighbor setting off your alarm by sending a false signal — no key required, just an unwanted ping! This vulnerability allows an attacker to trigger a system crash without any user interaction or special access. If exploited, this could lead to a complete denial of service for users connected to the rogue base station, bringing critical operations to a standstill. It's like a power outage that leaves you in the dark, but without any warning! Just imagine the chaos if your communications go offline unexpectedly.

Put simply

Think of this like a mischievous neighbor setting off your alarm by sending a false signal — no key required, just an unwanted ping! This vulnerability allows an attacker to trigger a system crash without any user interaction or special access. This vulnerability occurs due to incorrect error handling in Modem, which can be triggered when a user equipment (UE) connects to an attacker-controlled base station, leading to a potential system crash.

What to do

If exploited, this could lead to a complete denial of service for users connected to the rogue base station, bringing critical operations to a standstill. It's like a power outage that leaves you in the dark, but without any warning! Just imagine the chaos if your communications go offline unexpectedly. To mitigate this issue, patch your systems with Patch ID: MOLY01738313 as soon as possible. Additionally, ensure your network is secured against unauthorized base stations to further protect your devices. You’ve got this! Update your systems and stay ahead of the game. 🛡️

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00241 · 14.4th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-02-02T08:14Z
EPSS history
Timeline
  • 02 FEB 08:14Z
    In Modem, there is a possible system crash due to incorrect error handling
    cvelistv5