CVE-2026-20421CWE-125

In Modem, there is a possible system crash due to improper input validation

Medium · published February 2, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
13.8
In the wild
Unconfirmed
What it is

⚠️ A simple case of poor input validation could bring your system to its knees! Just connecting to a rogue base station might be all an attacker needs. 😱 Think of it like a restaurant where anyone can place an order without checking their credentials — the kitchen might just serve up everything without verifying the request. If a rogue chef decides to flood the kitchen with outrageous orders, chaos would ensue! The result? A remote denial of service that leaves connected users in the lurch, unable to access services they rely on. It’s surprisingly sneaky since no user interaction is required for this to happen, making it a real hidden threat!

Put simply

Think of it like a restaurant where anyone can place an order without checking their credentials — the kitchen might just serve up everything without verifying the request. If a rogue chef decides to flood the kitchen with outrageous orders, chaos would ensue! This vulnerability in Modem arises from improper input validation, allowing an attacker controlling a rogue base station to crash the system without needing any additional execution privileges.

What to do

The result? A remote denial of service that leaves connected users in the lurch, unable to access services they rely on. It’s surprisingly sneaky since no user interaction is required for this to happen, making it a real hidden threat! To mitigate this issue, patch your systems with the provided Patch ID: MOLY01738293. Regularly review your base station connections and ensure that they are legitimate to prevent unauthorized access. You've got this! Follow these steps, and you’ll secure your systems in no time. 🛡️

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.8th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-02-02T08:14Z
EPSS history
Timeline
  • 02 FEB 08:14Z
    In Modem, there is a possible system crash due to improper input validation
    cvelistv5