CVE-2026-20422CWE-617

In Modem, there is a possible system crash due to improper input validation

Medium · published February 2, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
14.4
In the wild
Unconfirmed
What it is

⚠️ A rogue base station could crash your system with just a crafty signal! This vulnerability in Modem allows attackers to cause a remote denial of service without ever needing to log in. 😱 Think of it like a neighbor blasting their stereo at full volume — your peace of mind is shattered, and you can't do anything about it because you're not even home. This lack of input validation is what lets the attacker take control without any invite! When a user connects to a malicious base station, it could result in an unexpected system crash, leaving devices unable to function properly. This means downtime and inconvenience, especially if the device is critical for communication or services. 🚨

Put simply

Think of it like a neighbor blasting their stereo at full volume — your peace of mind is shattered, and you can't do anything about it because you're not even home. This lack of input validation is what lets the attacker take control without any invite! CVE-2026-20422 arises from improper input validation in Modem, allowing a denial of service attack when a User Equipment (UE) connects to a rogue base station. The exploit requires no user interaction and escalates quickly due to its nature of input handling.

What to do

When a user connects to a malicious base station, it could result in an unexpected system crash, leaving devices unable to function properly. This means downtime and inconvenience, especially if the device is critical for communication or services. 🚨 To secure your systems, apply patch ID MOLY00827332 as soon as possible. Monitor connections to ensure no rogue base stations are within range. Implement additional checks and safeguards where feasible to enhance input validation practices. You've got this! With the right patching and vigilance, you can keep your systems running smoothly and securely! 🛡️

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00241 · 14.4th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2026-02-02T08:14Z
EPSS history
Timeline
  • 02 FEB 08:14Z
    In Modem, there is a possible system crash due to improper input validation
    cvelistv5