Modem vulnerabilities
CVEs whose affected-version data names the Modem package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-66086Critical· 9.8In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages
In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution pri…
▾ MidnightUnisoc (Shanghai) Technologies Co., Ltd. · ModemEPSS 0.46%via NVD
CVE-2026-66085Medium· 5.5In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps
In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges needed.
▾ SunlitUnisoc (Shanghai) Technologies Co., Ltd. · ModemEPSS 0.11%via NVD