CVE-2026-20541

Published Oct 5, 2026

Last updated 12 days ago

Overview

Description
In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8911.
Source
security@mediatek.com
NVD status
Analyzed
Products
mt6985_firmware, mt6986_firmware, mt6988_firmware, mt6989_firmware, mt6990_firmware, mt6991_firmware, mt6993_firmware, mt8666_firmware, mt8667_firmware, mt8668_firmware, mt8673_firmware, mt8675_firmware, mt8676_firmware, mt8678_firmware, mt8755_firmware, mt8765_firmware, mt8766_firmware, mt8766r_firmware, mt8768_firmware, mt8771_firmware, mt8775_firmware, mt8781_firmware, mt8786_firmware, mt8788_firmware, mt8788e_firmware, mt8789_firmware, mt8791_firmware, mt8791t_firmware, mt8792_firmware, mt8793_firmware, mt8795t_firmware, mt8796_firmware, mt8797_firmware, mt8798_firmware, mt8863_firmware, mt8873_firmware, mt8883_firmware, mt8893_firmware, mt2716_firmware, mt2735_firmware, mt2737_firmware, mt6739_firmware, mt6761_firmware, mt6762_firmware, mt6763_firmware, mt6765_firmware, mt6767_firmware, mt6768_firmware, mt6769_firmware, mt6771_firmware, mt6779_firmware, mt6781_firmware, mt6783_firmware, mt6785_firmware, mt6789_firmware, mt6813_firmware, mt6815_firmware, mt6833_firmware, mt6835_firmware, mt6853_firmware, mt6855_firmware, mt6858_firmware, mt6873_firmware, mt6875_firmware, mt6877_firmware, mt6878_firmware, mt6879_firmware, mt6880_firmware, mt6881_firmware, mt6883_firmware, mt6885_firmware, mt6886_firmware, mt6889_firmware, mt6890_firmware, mt6891_firmware, mt6893_firmware, mt6895_firmware, mt6896_firmware, mt6897_firmware, mt6899_firmware, mt6980_firmware, mt6982_firmware, mt6983_firmware

Risk scores

CVSS 3.1

Type
Secondary
Base score
5.3
Impact score
3.6
Exploitability score
1.6
Vector string
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity
MEDIUM

Weaknesses

security@mediatek.com
CWE-126

Social media

Hype score
Not currently trending

Configurations

References

Sources include official advisories and independent security research.