Skip to content
Sign in
7.5 High

CVE-2026-79405 Improper Input Validation in Modem Firmware

Description

Transient DOS when processing a malformed NR RRC configuration message due to improper input validation.

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitable remotely over the network, without an account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Network
Attack complexity
Low
Privileges required
None
Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Affected products and versions

Product Affected versions Fixed in
Modem Versions not published

Other CVEs of Modem

The 3 CVEs of Modem →
CVE-2026-66086 In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling… 8.3 High CVE-2026-66085 In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps 5.5 Medium
Track this CVE