EUVD-2026-78991
GHSA-m26c-v6qm-fwp8
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Primary rating from Vendor (Google_Devices) · only source for this CVE.
CVSS VectorVendor: Google_Devices
Lifecycle Timeline
3DescriptionCVE.org
In Modem, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
AnalysisAI
Information disclosure in the Google Android modem (baseband) component lets a network-positioned attacker holding low privileges read sensitive data out of the modem by supplying improperly validated input, with no user interaction required; the CVSS 3.1 base score is 6.5 with confidentiality as the only impacted metric. Google's Pixel security bulletin reference indicates a vendor fix path, while no public exploit code and no CISA KEV entry were identified at time of analysis.
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-20 – Improper Input Validation
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today