[Debian-on-mobile-maintainers] Bug#1149673: modemmanager: CVE-2026-95622

[Salvatore Bonaccorso]

Source: modemmanager
Version: 1.24.2-2
Severity: important
Tags: security upstream
X-Debbugs-Cc: carnil at debian.org, Debian Security Team <team at security.debian.org>

Hi,

The following vulnerability was published for modemmanager.

CVE-2026-95622[0]:
| Reachable assertion in Cell Broadcast encoding parse causes denial
| of service

Unfortunately at time of writing this bugreport there was only the
bugzilla reference from Red Hat. What is the upstream status?

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-95622
    https://www.cve.org/CVERecord?id=CVE-2026-95622
[1] https://bugzilla.redhat.com/show_bug.cgi?id=2540006

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore