{"id":"CVE-2026-79405","aliases":["A-553145530","ASB-A-553145530","EUVD-2026-116697","GHSA-gcxh-jvp5-37f4","U-3457076"],"status":"published","title":"Improper Input Validation in Modem Firmware","description":"Transient DOS when processing a malformed NR RRC configuration message due to improper input validation.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0046,"percentile":0.40316,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2026-11-01T00:00:00Z","modified":"2026-11-05T06:37:02Z","fixes":[{"ecosystem":"Android","package":":unknown:","fixed_in":["SoCVersion:2026-11-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":unknown:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2026-11-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"unisoc (shanghai) technologies co., ltd.","product":"modem"}],"references":[{"url":"https://www.unisoc.com/en/support/product-security-bulletin/2117823464494759937"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79405"},{"url":"https://github.com/advisories/GHSA-gcxh-jvp5-37f4"},{"url":"https://source.android.com/security/bulletin/2026-11-01","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-79405","title":"Improper Input Validation in Modem Firmware","description":"Transient DOS when processing a malformed NR RRC configuration message due to improper input validation.","status":"published","published":"2026-11-04T03:20:48.681Z","modified":"2026-11-05T06:37:02.058Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-05T09:07:36.520409Z"}],"euvd":[{"id":"EUVD-2026-116697","description":"Transient DOS when processing a malformed NR RRC configuration message due to improper input validation.","status":"published","published":"2026-11-04T03:20:48Z","modified":"2026-11-05T06:37:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-05T13:14:14.77537Z"}],"ghsa":[{"id":"GHSA-gcxh-jvp5-37f4","title":"In Modem Firmware, there is a possible system crash due to improper input validation of dedicated...","description":"In Modem Firmware, there is a possible system crash due to improper input validation of dedicated PUCCH configuration. This could lead to remote denial of service with no additional execution privileges needed.","status":"published","published":"2026-11-04T06:32:57Z","modified":"2026-11-04T06:33:04Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-04T06:56:58.885599Z"}],"nvd":[{"id":"CVE-2026-79405","description":"Transient DOS when processing a malformed NR RRC configuration message due to improper input validation.","status":"published","published":"2026-11-04T04:17:37.48Z","modified":"2026-11-05T07:17:27.45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-05T13:18:47.4585Z"}],"osv":[{"id":"ASB-A-553145530","status":"published","published":"2026-11-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-09T17:05:18.698671Z"}]}}