CVE-2026-20479

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00741071; Issue ID: MSV-7620.

Score

CVSS 3.1 7.5 High

Status

Analyzed - security@mediatek.com

Published

2026-08-03

Last modified

2026-10-23

Weaknesses

CWE-125

Affected products

• Mt2735 Firmware (Mediatek)
• Mt6833 Firmware (Mediatek)
• Mt6853 Firmware (Mediatek)
• Mt6855 Firmware (Mediatek)
• Mt6873 Firmware (Mediatek)
• Mt6875 Firmware (Mediatek)
• Mt6877 Firmware (Mediatek)
• Mt6880 Firmware (Mediatek)
• Mt6883 Firmware (Mediatek)
• Mt6885 Firmware (Mediatek)
• Mt6889 Firmware (Mediatek)
• Mt6890 Firmware (Mediatek)
• Mt6891 Firmware (Mediatek)
• Mt6893 Firmware (Mediatek)
• Mt8675 Firmware (Mediatek)
• Mt8771 Firmware (Mediatek)
• Mt8791 Firmware (Mediatek)
• Mt8791t Firmware (Mediatek)
• Mt8797 Firmware (Mediatek)
• Mediatek Chipset (Mediatek Inc.)

References

• https://www.mediatek.com/product-security-bulletin/August-2026