CVE-2026-20504

MEDIUM CVSS 3.1: 5.3 EPSS 0.19%
Updated Sep 09, 2026
Mediatek
Parameter Value
CVSS 5.3 (MEDIUM)
Type CWE-617
Vendor Mediatek
Public PoC No

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

Patch ID: MOLY00755024; Issue ID: MSV-7865.

Attack Parameters

Attack Vector
Adjacent
Requires local network access
Attack Complexity
High
Difficult to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
None
No data leak
Integrity
None
No data modification
Availability
High
Complete denial of service

CVSS Vector v3.1

Weakness Type (CWE)

Vulnerable Products 38

Configuration From (including) Up to (excluding)
Mediatek Mt2735_Firmware
cpe:2.3:o:mediatek:mt2735_firmware:-:*:*:*:*:*:*:*
Mediatek Mt2735
cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*
Mediatek Mt6833_Firmware
cpe:2.3:o:mediatek:mt6833_firmware:-:*:*:*:*:*:*:*
Mediatek Mt6833
cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*
Mediatek Mt6853_Firmware
cpe:2.3:o:mediatek:mt6853_firmware:-:*:*:*:*:*:*:*
Mediatek Mt6853
cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*
Mediatek Mt6855_Firmware
cpe:2.3:o:mediatek:mt6855_firmware:-:*:*:*:*:*:*:*
Mediatek Mt6855
cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*
Mediatek Mt6873_Firmware
cpe:2.3:o:mediatek:mt6873_firmware:-:*:*:*:*:*:*:*
Mediatek Mt6873
cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*
Mediatek Mt6875_Firmware
cpe:2.3:o:mediatek:mt6875_firmware:-:*:*:*:*:*:*:*
Mediatek Mt6875
cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*
Mediatek Mt6877_Firmware
cpe:2.3:o:mediatek:mt6877_firmware:-:*:*:*:*:*:*:*
Mediatek Mt6877
cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*
Mediatek Mt6880_Firmware
cpe:2.3:o:mediatek:mt6880_firmware:-:*:*:*:*:*:*:*
Mediatek Mt6880
cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*
Mediatek Mt6883_Firmware
cpe:2.3:o:mediatek:mt6883_firmware:-:*:*:*:*:*:*:*
Mediatek Mt6883
cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*
Mediatek Mt6885_Firmware
cpe:2.3:o:mediatek:mt6885_firmware:-:*:*:*:*:*:*:*
Mediatek Mt6885
cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*
Mediatek Mt6889_Firmware
cpe:2.3:o:mediatek:mt6889_firmware:-:*:*:*:*:*:*:*
Mediatek Mt6889
cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*
Mediatek Mt6890_Firmware
cpe:2.3:o:mediatek:mt6890_firmware:-:*:*:*:*:*:*:*
Mediatek Mt6890
cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*
Mediatek Mt6891_Firmware
cpe:2.3:o:mediatek:mt6891_firmware:-:*:*:*:*:*:*:*
Mediatek Mt6891
cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*
Mediatek Mt6893_Firmware
cpe:2.3:o:mediatek:mt6893_firmware:-:*:*:*:*:*:*:*
Mediatek Mt6893
cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*
Mediatek Mt8675_Firmware
cpe:2.3:o:mediatek:mt8675_firmware:-:*:*:*:*:*:*:*
Mediatek Mt8675
cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*
Mediatek Mt8771_Firmware
cpe:2.3:o:mediatek:mt8771_firmware:-:*:*:*:*:*:*:*
Mediatek Mt8771
cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*
Mediatek Mt8791_Firmware
cpe:2.3:o:mediatek:mt8791_firmware:-:*:*:*:*:*:*:*
Mediatek Mt8791
cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*
Mediatek Mt8791t_Firmware
cpe:2.3:o:mediatek:mt8791t_firmware:-:*:*:*:*:*:*:*
Mediatek Mt8791t
cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*
Mediatek Mt8797_Firmware
cpe:2.3:o:mediatek:mt8797_firmware:-:*:*:*:*:*:*:*
Mediatek Mt8797
cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*