CVE advisoryCRITICAL
CVE-2026-66086
Modem OTA Stack Buffer Overflow Vulnerability
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A buffer overflow vulnerability exists in the modem's Over-the-Air update stack due to improper validation of scheduling information. If reachable, this could allow an unauthenticated attacker to execute remote code or cause a denial of service. This issue is relevant due to its potential impact on device operation.