CVE-2026-66086: high-severity vulnerability in Unisoc (Shanghai) Technologies Co., Ltd. Modem
Stack-based Buffer Overflow in Modem
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.3epss 0.5%
In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Unisoc (Shanghai) Technologies Co., Ltd. · ModemRelated CVEs — Unisoc (Shanghai) Technologies Co., Ltd. Modem
In the same product, most dangerous first.