CVEvulnerability
CVE-2026-20450
6.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-05-04
- Last modified
- 2026-10-26
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-617
Description
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100.
Affected configurations
• mediatek mt2735 firmware
• mediatek mt2737 firmware
• mediatek mt6833 firmware
• mediatek mt6835 firmware
• mediatek mt6853 firmware
• mediatek mt6855 firmware
• mediatek mt6858 firmware
• mediatek mt6873 firmware
• mediatek mt6875 firmware
• mediatek mt6877 firmware
• mediatek mt6878 firmware
• mediatek mt6879 firmware
• mediatek mt6880 firmware
• mediatek mt6883 firmware
• mediatek mt6885 firmware
• mediatek mt6886 firmware
• mediatek mt6889 firmware
• mediatek mt6890 firmware
• mediatek mt6891 firmware
• mediatek mt6893 firmware
• mediatek mt6895 firmware
• mediatek mt6896 firmware
• mediatek mt6897 firmware
• mediatek mt6899 firmware
• mediatek mt6980 firmware
• mediatek mt6983 firmware
• mediatek mt6985 firmware
• mediatek mt6986 firmware
• mediatek mt6989 firmware
• mediatek mt6990 firmware
• mediatek mt6991 firmware
• mediatek mt6993 firmware
• mediatek mt8668 firmware
• mediatek mt8673 firmware
• mediatek mt8675 firmware
• mediatek mt8676 firmware
• mediatek mt8678 firmware
• mediatek mt8755 firmware
• mediatek mt8771 firmware
• mediatek mt8775 firmware
• mediatek mt8791 firmware
• mediatek mt8791t firmware
• mediatek mt8792 firmware
• mediatek mt8793 firmware
• mediatek mt8795t firmware
• mediatek mt8797 firmware
• mediatek mt8798 firmware
• mediatek mt8863 firmware
• mediatek mt8873 firmware
• mediatek mt8883 firmware
• mediatek mt8893 firmware
Related
Weakness · CWE (1)
- CWE-617 Reachable Assertion weakness
References
- https://corp.mediatek.com/product-security-bulletin/May-2026 Vendor Advisory