CVE-2026-20562
Medium · 5.3CVSS
5.3
EPSS
0.2%
Published
Nov 2, 2026
CISA due date
—
The record
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01775984; Issue ID: MSV-8907.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-115274 Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard… CWE-1284
- CVE-2026-109821 Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard… CWE-1284
- CVE-2026-119186 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-1284
- CVE-2026-118782 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-1284
- CVE-2026-114349 When a broker decodes a compressed record batch, the per-record decoder reads a declared… CWE-1284
- CVE-2026-103594 A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration… CWE-1284
- CVE-2026-116581 Seroval facilitates JavaScript value stringification, including complex structures beyond… CWE-1284
- CVE-2026-115906 zip is a zip library for Rust that supports reading and writing simple ZIP files. CWE-1284