---
id: "CVE-2026-79405"
kind: "vulnerability"
aliases: ["CVE-2026-79405"]
title: "Unisoc UDX710 modem firmware: malformed PUCCH configuration can crash the modem remotely"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "UDX710 modem firmware", "fixed": [], "affected": "unknown versions (Unisoc lists chipset UDX710; list may be incomplete)", "ecosystem": "vendor"}]
ecosystems: []
tags: ["android", "cellular", "infrastructure", "mobile-devices", "modem-firmware", "udx710", "unisoc"]
not_affected_if: []
published_at: "2026-11-04T04:17:37+00:00"
first_seen_at: "2026-11-04T04:46:24+00:00"
updated_at: "2026-11-04T04:49:27+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-79405", "first_seen_at": "2026-11-04T04:46:24+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-04T04:49:27+00:00"}]
---

# Unisoc UDX710 modem firmware: malformed PUCCH configuration can crash the modem remotely

Unisoc's November 2026 bulletin lists CVE-2026-79405: improper input validation (CWE-20) of dedicated PUCCH configuration in modem firmware can cause a system crash, a remote denial of service needing no privileges (CVSS 7.5, network vector). Affected chipset listed: UDX710; Unisoc says the list may not be complete. The bulletin gives no fixed firmware version and no exploitation information. Phones and devices on the UDX710 modem are the ones to look at; device makers must ship Unisoc's fix. Other chipsets are not listed.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:UDX710 modem firmware affected unknown versions (Unisoc lists chipset UDX710; list may be incomplete) fixed ?

## How to check

Check with your device maker whether the device uses a Unisoc UDX710 modem (device specs or baseband version in Settings > About phone). Unisoc gives no firmware version to compare; ask the OEM whether its update includes the fix for CVE-2026-79405.

## Timeline

- 2026-11-04T04:46:24+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-79405
- 2026-11-04T04:49:27+00:00 analyst — Primary: Unisoc bulletin 2026-11-01 (doc 64221). Chipset UDX710 only, no fixed version or exploitation stated, so fix left unknown and nothing marked verified. NVD page returned nothing; Appaloosa claims Android Nov 2026 patch level but that is secondary, unconfirmed. Audience set to developers (OEM-facing); no plain action.

## Documents

- [advisory] Unisoc Product Security Bulletin (version 1.0, 2026-11-01) https://www.unisoc.com/en/support/product-security-bulletin/2117818023857520641

## From the sources

In Modem Firmware, there is a possible system crash due to improper input validation of dedicated PUCCH configuration. This could lead to remote denial of service with no additional execution privileges needed.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_