{"id":"CVE-2026-68589","kind":"vulnerability","aliases":["CVE-2026-68589"],"related":[],"title":"Modem firmware: out-of-bounds write lets a System-privileged process escalate","description":"In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01320076; Issue ID: MSV-6889.","summary":"A missing bounds check in the modem component allows an out-of-bounds write. An attacker who already holds System privilege on the device can use it to escalate privileges further.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","mobile-devices","modem-firmware"],"not_affected_if":["unknown"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T03:17:38+00:00","first_seen_at":"2026-11-02T03:31:26+00:00","triaged_at":"2026-11-02T03:32:01+00:00","updated_at":"2026-11-02T03:32:01+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-02T03:32:01Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Modem firmware: out-of-bounds write lets a System-privileged process escalate","impact":"high","summary":"A missing bounds check in the modem component allows an out-of-bounds write. An attacker who already holds System privilege on the device can use it to escalate privileges further.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["mobile-devices","modem-firmware"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker with System privilege gains higher privileges on the device","analyst_note":"Check the vendor bulletin for Patch ID MOLY01320076 / Issue MSV-6889 to confirm affected chipsets and the fixed firmware version.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Devices with a vulnerable modem component, per the vendor patch referenced as MOLY01320076. The sources do not list affected models or versions. Exploitation requires an attacker who already has System privilege, so the risk is local escalation rather than remote entry.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000634,"input_tokens":4103,"output_tokens":447,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':16A,19A '-68589':17A,20A '-6889':106C 'actor':86C 'allow':36B 'alreadi':46B,88C 'attack':44B 'bound':6A,30B,41B,67C,73C 'check':31B,74C 'compon':35B 'could':76C 'cve':15A,18A 'devic':24B,52B 'due':69C 'escal':14A,57B,80C 'exploit':99C 'firmwar':2A,27B 'hold':47B 'id':101C,104C 'infrastructur':21B 'interact':94C 'issu':103C 'lead':77C 'let':8A 'local':79C 'malici':85C 'miss':29B,72C 'mobil':23B 'mobile-devic':22B 'modem':1A,26B,34B,60C 'modem-firmwar':25B 'moly01320076':102C 'msv':105C 'need':97C 'obtain':89C 'out-of-bound':3A,38B 'patch':100C 'possibl':64C 'privileg':12A,49B,58B,82C,92C 'process':13A 'system':11A,48B,91C 'system-privileg':10A 'use':54B 'user':93C 'write':7A,42B,68C","nicknames":[],"mitigations":[],"who_affected":"Devices with a vulnerable modem component, per the vendor patch referenced as MOLY01320076. The sources do not list affected models or versions. Exploitation requires an attacker who already has System privilege, so the risk is local escalation rather than remote entry.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","mobiledevices","modemfirmware","unknown"],"first_public_at":"2026-11-02T03:17:38+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-68589","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68589","severity":null,"published_at":"2026-11-02T03:17:38+00:00","modified_at":"2026-11-02T03:17:38+00:00","first_seen_at":"2026-11-02T03:31:26+00:00","fetched_at":"2026-11-02T03:31:26+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}