EUVD-2026-79004
GHSA-chq2-jxgv-5vfw
Severity by source
AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (Google_Devices) · only source for this CVE.
CVSS VectorVendor: Google_Devices
Lifecycle Timeline
2DescriptionCVE.org
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
AnalysisAI
A permission bypass in the Android Cellular Modem (baseband) component lets an attacker who is within radio range of the device escalate privileges inside the modem context, exposing confidentiality, integrity and availability of device data with no user interaction. Exploitation requires the attacker to already hold low-level privileges on the modem interface (CVSS PR:L) and to be network-adjacent (AV:A), which in practice points to a rogue or compromised cellular base station rather than an internet-based attacker. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-285 – Improper Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today