CVE-2026-66086
Stack-based Buffer Overflow in Modem
CVSS Score
8.3
EPSS Score
0.0%
EPSS Percentile
0th
In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed.
| CWE | CWE-121 |
| Vendor | unisoc (shanghai) technologies co., ltd. |
| Product | modem |
| Published | Oct 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for unisoc (shanghai) technologies co., ltd. modem
Be the first to know when new high vulnerabilities affecting unisoc (shanghai) technologies co., ltd. modem are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Unisoc (Shanghai) Technologies Co., Ltd. / Modem
T8100 T9100 UDX710