Live › vulnerability › CVE-2026-79405
Unisoc's November 2026 bulletin lists CVE-2026-79405: improper input validation (CWE-20) of dedicated PUCCH configuration in modem firmware can cause a system crash, a remote denial of service needing no privileges (CVSS 7.5, network vector). Affected chipset listed: UDX710; Unisoc says the list may not be complete. The bulletin gives no fixed firmware version and no exploitation information. Phones and devices on the UDX710 modem are the ones to look at; device makers must ship Unisoc's fix. Other chipsets are not listed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-04 04:46 UTC. All times on this page are UTC.
The sources do not name the affected modem chipsets or devices. A device whose modem firmware is in the affected range can be crashed remotely by a crafted cellular configuration message; the sources do not say which versions are affected.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| UDX710 modem firmware | vendor | unknown versions (Unisoc lists chipset UDX710; list may be incomplete) | – |
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In Modem Firmware, there is a possible system crash due to improper input validation of dedicated PUCCH configuration. This could lead to remote denial of service with no additional execution privileges needed.
This page as .md · .json · in your agent: get_signal("CVE-2026-79405")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.