CVE-2026-20432

CVE-2026-20432 is an out of bounds write vulnerability in Modem caused by missing bounds validation. This flaw could allow remote privilege escalation when a user connects to a rogue base station controlled by an attacker, though user interaction is required for exploitation. The vulnerability carries a CVSS score of 8.0 (HIGH) with an adjacent network attack vector, low complexity, and no privilege requirements. Successful exploitation would result in high impact across confidentiality, integrity, and availability. The EPSS score of 0.00026 indicates minimal current prevalence in active exploitation attempts. There is no evidence of active exploitation in the wild or public exploit code availability. The vulnerability is not included on the CISA Known Exploited Vulnerabilities catalog and shows no community attention on security hotlists. Patch MOLY01406170 is available to address this issue.