Riskcovery

CVE-2026-66086

Stack-based Buffer Overflow in Modem

State
Published
Severity
8.3 High
Published
Oct 12, 2026
Updated
Oct 15, 2026
Reserved
Jul 24, 2026

Read the record on cve.org

Description

In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed.

Scores

CVSSScoreVectorSource
3.18.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HUnisoc

Weaknesses

Affected Products

ProductVersions
ModemUnisoc (Shanghai) Technologies Co., Ltd.
  • T8100Affected
  • T9100Affected
  • UDX710Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.