CVE-2026-66086

{
  "etk_id": "ETK-2026-1282",
  "cve_id": "CVE-2026-66086",
  "display_id": "CVE-2026-66086",
  "ghsa_id": "GHSA-x9v2-w4w8-7v7g",
  "euvd_id": "EUVD-2026-97142",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Stack-based buffer overflow in Unisoc modem OTA stack",
  "summary": "Unisoc modem OTA processing is affected by a stack-based buffer overflow when handling scheduling information in SIB1 messages. An attacker able to supply affected messages may cause denial of service or execute code remotely without needing additional execution privileges.",
  "mitigation": "Apply an OEM or carrier modem firmware update that addresses this issue when one is provided. Until a confirmed fixed release is identified, keep device firmware current and monitor Unisoc, device-maker, and carrier advisories for remediation guidance.",
  "vendor": "Unisoc (Shanghai) Technologies Co., Ltd.",
  "product": "Modem",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "T8100",
        "T9100",
        "UDX710"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Modem",
      "purl": null
    }
  ],
  "cwes": [
    121
  ],
  "cvss_score": 8.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.0046,
  "epss_percentile": 0.3822,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 6.299130866666666,
  "t0_at": "2026-10-12T01:28:35.334000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-12T01:28:35.334000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-12T01:28:35.334000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-66086"
    }
  }
}