Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

NR modem may crash remotely, causing service outage

CVE-2026-21548 · published 2 months ago
Summary

The NR modem can be sent specially crafted data that may cause it to stop working, leading to a denial of service. Exploiting this requires system-level execution rights, so the impact is limited to privileged users. Apply any available updates or patches to the modem firmware to mitigate the risk.

What to do
  • Update google :unknown: to version SoCVersion:2026-09-05.
Affected software
Ecosystem VendorProductAffected versions
Android google :unknown: >= SoCVersion:0, < SoCVersion:2026-09-05
Fix: upgrade to SoCVersion:2026-09-05
Original advisory text
ASB-A-517353300
In nr modem, there is a possible improper input validation. This could lead to remote denial of service with System execution privileges needed.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published1 Sep 2026
Updated4 Nov 2026
First seen3 Aug 2026
Sources
CVE-2026-21548 · NVD
ASB-A-517353300 · OSV
Track software like this
Free during beta