CVE-2026-66086

critical · 9.8

In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed.

9.8

CVSS

0.5%

EPSS (exploit prob.)

39th

EPSS percentile

2026-10-12

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-121

References

https://www.unisoc.com/en/support/product-security-bulletin/2109454821805424641

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-66086