{"id":"CVE-2026-79405","kind":"vulnerability","aliases":["CVE-2026-79405"],"related":[],"title":"Unisoc UDX710 modem firmware: malformed PUCCH configuration can crash the modem remotely","description":"In Modem Firmware, there is a possible system crash due to improper input validation of dedicated PUCCH configuration. This could lead to remote denial of service with no additional execution privileges needed.","summary":"Unisoc's November 2026 bulletin lists CVE-2026-79405: improper input validation (CWE-20) of dedicated PUCCH configuration in modem firmware can cause a system crash, a remote denial of service needing no privileges (CVSS 7.5, network vector). Affected chipset listed: UDX710; Unisoc says the list may not be complete. The bulletin gives no fixed firmware version and no exploitation information. Phones and devices on the UDX710 modem are the ones to look at; device makers must ship Unisoc's fix. Other chipsets are not listed.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"UDX710 modem firmware","fixed":[],"affected":"unknown versions (Unisoc lists chipset UDX710; list may be incomplete)","ecosystem":"vendor"}],"ecosystems":[],"tags":["android","cellular","infrastructure","mobile-devices","modem-firmware","udx710","unisoc"],"not_affected_if":[],"how_to_check":"Check with your device maker whether the device uses a Unisoc UDX710 modem (device specs or baseband version in Settings > About phone). Unisoc gives no firmware version to compare; ask the OEM whether its update includes the fix for CVE-2026-79405.","fix":null,"status":"open","published_at":"2026-11-04T04:17:37+00:00","first_seen_at":"2026-11-04T04:46:24+00:00","triaged_at":"2026-11-04T04:47:53+00:00","updated_at":"2026-11-04T04:49:27+00:00","category":"infrastructure","confidence":0.8,"triage":{"at":"2026-11-04T04:47:53Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Modem firmware: malformed PUCCH configuration can crash the modem remotely","impact":"low","summary":"Improper input validation of dedicated PUCCH configuration in modem firmware can cause a system crash. The sources say an attacker can trigger a remote denial of service without extra privileges.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["modem-firmware","cellular","mobile-devices"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Modem crashes, causing denial of service on the device","analyst_note":"Find which modem firmware versions and chipsets are affected and whether a vendor bulletin (for example Android or Qualcomm) lists a fixed version; NVD page: https://nvd.nist.gov/vuln/detail/CVE-2026-79405","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"The sources do not name the affected modem chipsets or devices. A device whose modem firmware is in the affected range can be crashed remotely by a crafted cellular configuration message; the sources do not say which versions are affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000641,"input_tokens":4085,"output_tokens":464,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find which modem firmware versions and chipsets are affected and whether a vendor bulletin (for example Android or Qualcomm) lists a fixed version; NVD page: https://nvd.nist.gov/vuln/detail/CVE-2026-79405","search":"'-20':46B '-2026':14A,17A,40B '-79405':15A,18A,41B '2026':36B '7.5':68B 'addit':147C 'affect':71B 'android':22B 'bulletin':37B,84B 'caus':55B 'cellular':23B 'chipset':72B,115B 'complet':82B 'configur':7A,50B,136C 'could':138C 'crash':9A,58B,127C 'cve':13A,16A,39B 'cvss':67B 'cwe':45B 'dedic':48B,134C 'denial':61B,142C 'devic':27B,96B,107B 'due':128C 'execut':148C 'exploit':92B 'firmwar':4A,30B,53B,88B,121C 'firmware':21A 'fix':87B,113B 'give':85B 'improp':42B,130C 'inform':93B 'infrastructur':24B 'input':43B,131C 'lead':139C 'list':38B,73B,78B,118B 'look':105B 'maker':108B 'malform':5A 'may':79B 'mobil':26B 'mobile-devic':25B 'modem':3A,11A,20A,29B,52B,100B,120C 'modem-firmwar':28B 'must':109B 'need':64B,150C 'network':69B 'novemb':35B 'one':103B 'phone':94B 'possibl':125C 'privileg':66B,149C 'pucch':6A,49B,135C 'remot':12A,60B,141C 'say':76B 'servic':63B,144C 'ship':110B 'system':57B,126C 'udx710':2A,19A,31B,74B,99B 'unisoc':1A,32B,33B,75B,111B 'valid':44B,132C 'vector':70B 'version':89B","nicknames":[],"mitigations":[],"who_affected":"The sources do not name the affected modem chipsets or devices. A device whose modem firmware is in the affected range can be crashed remotely by a crafted cellular configuration message; the sources do not say which versions are affected.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"pkeys":["modemfirmware","udx710modemfirmware"],"ptokens":["firmware","modem","udx710"],"labels":["android","cellular","high","infrastructure","mobiledevices","modemfirmware","udx710","unisoc"],"campaign_type":null,"first_public_at":"2026-11-04T04:17:37+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"security@unisoc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-79405","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79405","severity":null,"published_at":"2026-11-04T04:17:37+00:00","modified_at":"2026-11-04T04:17:37+00:00","first_seen_at":"2026-11-04T04:46:24+00:00","fetched_at":"2026-11-04T04:46:24+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-79405:1633","url":null,"severity":null,"published_at":"2026-11-04T04:49:27+00:00","modified_at":"2026-11-04T04:49:27+00:00","first_seen_at":"2026-11-04T04:49:27+00:00","fetched_at":"2026-11-04T04:49:27+00:00","note":"Primary: Unisoc bulletin 2026-11-01 (doc 64221). Chipset UDX710 only, no fixed version or exploitation stated, so fix left unknown and nothing marked verified. NVD page returned nothing; Appaloosa claims Android Nov 2026 patch level but that is secondary, unconfirmed. Audience set to developers (OEM-facing); no plain action."}],"documents":[{"id":64221,"url":"https://www.unisoc.com/en/support/product-security-bulletin/2117818023857520641","title":"Unisoc Product Security Bulletin (version 1.0, 2026-11-01)","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}