CVE-2026-20460

In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20667

CVE-2025-20667 concerns a remote information disclosure in the Modem due to incorrect error handling. The vulnerability allows information disclosure without user interaction if a user equipment (UE) connects to a rogue base station controlled by an attacker, with no additional execution privileg...

PT-2025-19331 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote information disclosure if a UE has connected to a rogue base station controlled...

CVE-2024-38426 Improper Authentication in Modem

While processing the authentication message in UE, improper authentication may lead to information disclosure...

CVE-2023-21156

In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure from the modem with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...