CVE-2026-20421: Out-of-bounds Read

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2026-20406: Allocation of Resources Without Limits or Throttling

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID...

CVE-2026-20402: Out-of-bounds Write

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2026-20403: Out-of-bounds Write

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...

CVE-2026-20405: Reachable Assertion

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I...

CVE-2026-20404: Out-of-bounds Write

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

CVE-2026-20422: Reachable Assertion

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. The MediaTek Chipsets contain security vulnerabilities; these vulnerabilities stem from the lack of boundary checking in the modem component, which may lead to remote denial-of-service attacks...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. The MediaTek Chipsets contain security vulnerabilities; these vulnerabilities stem from the lack of boundary checking in the modem component, which may lead to remote denial-of-service attacks...

CVE-2026-20420: Out-of-bounds Read

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch...

PT-2026-5625

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that could lead to a remote denial of service. This occurs due to improper input validation, potentially causing a system crash. An attacker could exploit this by having ...

PT-2026-5627

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that could lead to a remote denial of service. This occurs due to improper input validation, potentially causing a system crash. An attacker can exploit this issue if a...

PT-2026-5624

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A system crash due to an uncaught exception may lead to remote denial of service. This can occur if a User Equipment UE connects to a rogue base station controlled by an attacker, requiring no...

CVE-2026-20401: Reachable Assertion

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID...

PT-2026-5629

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A system crash due to an uncaught exception may lead to remote denial of service. This can occur if a User Equipment UE connects to a rogue base station controlled by an attacker, requiring no...

PT-2026-5642

Name of the Vulnerable Software and Affected Versions Modem affected versions not specified Description A flaw exists in Modem that may lead to a system crash due to improper error handling. This could result in a remote denial of service if a User Equipment UE connects to a malicious base statio...

The vulnerability of the Motorola SM56 Modem WDM Driver (SmSerl64.sys) on the Windows operating system allows a hacker to bypass existing security restrictions, enhance their own capabilities, execute arbitrary code, and disclose sensitive information.

The vulnerability of the Motorola SM56 Modem WDM Driver SmSerl64.sys for the Windows operating system relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to bypass existing security restrictions, elevate their...

KB5073379: Windows Server 2025 Security Update (January 2026)

The remote Windows host is missing security update 5073379. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to execute code over a network. CVE-2026-20854 - An issue was discovered in...

KB5074109: Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 2025 Security Update (January 2026)

The remote Windows host is missing security update 5074109. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to execute code over a network. CVE-2026-20854 - An issue was discovered in...

The vulnerability of the Agere Modem Driver for Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Agere Modem Driver for Windows operating systems is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain increased privileges...