CVE-2025-20659

The CVE-2025-20659 entry concerns a vulnerability in Modem where improper input validation can cause a system crash, enabling remote denial of service when a UE connects to a rogue base station. Exploitation requires no user interaction and has an adjacent attack vector with no privileges require...

CVE-2026-20498

CVE-2026-20498 affects the geniezone component. The issue is a missing permission check that can allow local privilege escalation if an attacker already has System privileges. Exploitation reportedly does not require user interaction. A patch/workaround is identified as Patch ID: ALPS10900493 (MS...

CVE-2026-20497

In geniezone, CVE-2026-20497 describes an out-of-bounds write due to a missing bounds check that could enable local privilege escalation for an actor already with System privilege. No user interaction is required. Affected patch IDs are ALPS10965550 and ALPS11393405 (Issue MSV-6941). The CVSS con...

CVE-2026-20481

CVE-2026-20481 affects the geniezone component. It describes an out-of-bounds write caused by a missing bounds check, allowing local escalation of privilege if the attacker already has System privileges. No user interaction is required. Patch ID: ALPS10965373; Issue ID: MSV-6935. Available connec...

CVE-2026-20496

CVE-2026-20496 affects the geniezone component with an out-of-bounds read caused by a missing bounds check. If an attacker already has System privileges, this can lead to local information disclosure without user interaction. Patch ALPS11036877 (MSV-7132) is referenced as the remedy. The provided...

CVE-2026-20483

CVE-2026-20483 concerns the Telephony component, where a missing permission check enables local escalation of privilege without user interaction. The issue is described as allowing exploitation with only local access and no additional privileges, elevating from NONE. The available data identifies...

CVE-2026-20451

CVE-2026-20451 affects the slbc component. An out-of-bounds write caused by type confusion could enable local privilege escalation to SYSTEM without user interaction. Patch ALPS10828685 (MSV-6504) addresses the issue. Exploitation details are not provided. CVSSv3.1 metrics: AV:L/AC:L/PR:H/UI:N/S:...

CVE-2026-20448

In geniezone, CVE-2026-20448 is a local privilege-escalation vulnerability caused by a missing permission check. It could allow a user with System privileges to escalate further without user interaction. Patch ALPS10708513 (Issue MSV-6281) is referenced; no exploit details are provided in the doc...