{"id":"CVE-2026-35494","kind":"vulnerability","aliases":["CVE-2026-35494"],"related":[],"title":"Baseband: memory corruption in NAS packet processing causes denial of service","description":"In the baseband, memory corruption during NAS packet processing can cause a denial of service.","summary":"A memory corruption flaw in the phone baseband, the modem component that handles cellular network traffic, is triggered while it processes NAS packets. The sources say the result is a denial of service, meaning the cellular connection can crash or stop working.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["baseband","infrastructure","mobile-devices"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-05T03:17:26+00:00","first_seen_at":"2026-11-05T03:31:43+00:00","triaged_at":"2026-11-05T03:33:49+00:00","updated_at":"2026-11-05T03:33:49+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-11-05T03:33:49Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Baseband: memory corruption in NAS packet processing causes denial of service","impact":"low","summary":"A memory corruption flaw in the phone baseband, the modem component that handles cellular network traffic, is triggered while it processes NAS packets. The sources say the result is a denial of service, meaning the cellular connection can crash or stop working.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["baseband","mobile-devices"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Cellular connectivity crashes or stops until the modem restarts","analyst_note":"Find the vendor bulletin for the affected baseband and the fixed firmware versions; the NVD entry gives no product data.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"The sources do not name the affected devices or baseband versions. The flaw sits in the modem firmware that handles cellular signalling, so the device model and its baseband release are what matter. unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000626,"input_tokens":4135,"output_tokens":425,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-35494':14A,17A 'baseband':1A,18B,30B,67C 'caus':8A,75C 'cellular':36B,58B 'compon':33B 'connect':59B 'corrupt':3A,25B,69C 'crash':61B 'cve':12A,15A 'denial':9A,53B,77C 'devic':22B 'flaw':26B 'handl':35B 'infrastructur':19B 'mean':56B 'memori':2A,24B,68C 'mobil':21B 'mobile-devic':20B 'modem':32B 'nas':5A,44B,71C 'network':37B 'packet':6A,45B,72C 'phone':29B 'process':7A,43B,73C 'result':50B 'say':48B 'servic':11A,55B,79C 'sourc':47B 'stop':63B 'traffic':38B 'trigger':40B 'work':64B","nicknames":[],"mitigations":[],"who_affected":"The sources do not name the affected devices or baseband versions. The flaw sits in the modem firmware that handles cellular signalling, so the device model and its baseband release are what matter. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["baseband","infrastructure","mobiledevices","unknown"],"campaign_type":null,"first_public_at":"2026-11-05T03:17:26+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-35494","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35494","severity":null,"published_at":"2026-11-05T03:17:26+00:00","modified_at":"2026-11-05T03:17:26+00:00","first_seen_at":"2026-11-05T03:31:43+00:00","fetched_at":"2026-11-05T03:31:43+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}