{"id":"CVE-2026-95622","aliases":["DEBIAN-CVE-2026-95622","UBUNTU-CVE-2026-95622"],"status":"published","description":"Reachable assertion in Cell Broadcast encoding parse causes denial of service","facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2026-09-28T08:47:25.690134154Z","modified":"2026-10-17T13:01:19Z","exploits":[{"source":"pocgithub","id":"0xSemizzz/CVE-2026-95622","title":"0xSemizzz/CVE-2026-95622","date":"2026-10-05","url":"https://github.com/0xSemizzz/CVE-2026-95622"}],"affected":[{"source":"osv","ecosystem":"Debian:13","package":"modemmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.24.0-1","1.24.0-1+deb13u1","1.24.2-1","1.24.2-2","1.25.1-1","1.25.95-1"]},{"source":"osv","ecosystem":"Debian:14","package":"modemmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.24.0-1","1.24.2-1","1.24.2-2","1.25.1-1","1.25.95-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"modemmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.10-1ubuntu2","1.4.12-1ubuntu1","1.6.4-1ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"modemmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.8-1","1.6.8-2","1.6.8-2ubuntu1","1.10.0-1~ubuntu18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"modemmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.4-0.1","1.12.6-1","1.12.8-1","1.16.6-2~20.04","1.16.6-2~20.04.1","1.18.6-1~ubuntu20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"modemmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.16.6-2","1.16.6-2ubuntu1","1.18.2-0ubuntu1","1.18.4-1","1.18.6-1","1.20.0-1~ubuntu22.04.1","1.20.0-1~ubuntu22.04.2","1.20.0-1~ubuntu22.04.3","1.20.0-1~ubuntu22.04.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"modemmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.20.6-1ubuntu1","1.20.6-1ubuntu2","1.22.0-2ubuntu2","1.22.0-3","1.23.4-0ubuntu1","1.23.4-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"modemmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.25.95-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"modemmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.24.2-0ubuntu1","1.24.2-1fakesync1","1.24.2-2fakesync1","1.25.95-1ubuntu1"]}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2026-95622","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-95622","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-95622","tags":["report"]}],"sources":{"osv":[{"id":"DEBIAN-CVE-2026-95622","status":"published","published":"2026-09-28T08:47:25.690134154Z","modified":"2026-10-03T02:00:08.955668751Z","updated_at":"2026-11-02T15:46:07.324252Z"},{"id":"UBUNTU-CVE-2026-95622","description":"Reachable assertion in Cell Broadcast encoding parse causes denial of service","status":"published","published":"2026-09-29T00:00:00Z","modified":"2026-10-17T13:01:19.55567326Z","updated_at":"2026-11-02T16:57:44.071534Z"}]}}