CVE-2026-66086 — Stack-based Buffer Overflow in Modem

CVE-2026-66086

Stack-based Buffer Overflow in Modem PUBLISHED

Description (CNA)

In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed.

Affected (CNA)

Vendor / product	Versions
Unisoc (Shanghai) Technologies Co., Ltd. / Modem	affected T8100; affected T9100; affected UDX710

CWE

CWE-121

References

https://www.unisoc.com/en/support/product-security-bulletin/2109454821805424641

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.