CVE-2026-20449

CVE-2026-20449 concerns a vulnerability in Modem where a heap buffer overflow can cause a system crash, leading to remote denial of service. Exploitation could occur if a device connects to a rogue base station controlled by an attacker, with no additional execution privileges and no user interac...

CVE-2026-20490

CVE-2026-20490 affects the ccci component and is caused by a missing bounds check that enables an out-of-bounds read. The vulnerability could allow local denial of service when an attacker already has System privileges; exploitation does not require user interaction. PATCH ALPS10981501 (Issue MSV...