CVE-2026-20432

HIGH

Mediatek, Inc. MediaTek Chipset < MT2735 - Out-of-Bounds Access

Title source: rule
STIX 2.1

Description

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01406170; Issue ID: MSV-4461.

Scores

CVSS v3 8.0
EPSS 0.0003
EPSS Percentile 7.4%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-787
Status published
Products (50)
mediatek/mt2735_firmware
mediatek/mt2737_firmware
mediatek/mt6779_firmware
mediatek/mt6781_firmware
mediatek/mt6783_firmware
mediatek/mt6785_firmware
mediatek/mt6789_firmware
mediatek/mt6813_firmware
mediatek/mt6815_firmware
mediatek/mt6833_firmware
... and 40 more
Published Apr 07, 2026
Tracked Since Apr 07, 2026