CVE-2026-20463

MEDIUM

MediaTek Chipset - Improper Handling of Insufficient Permissions or Privileges

Title source: rule
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-20463. PoCs published by HermesNA-1.

AI-analyzed exploit summary This repository contains an auto-generated stub module for CVE-2026-20463, a local privilege escalation (LPE) vulnerability in MediaTek modem firmware due to a permissions bypass. The code includes placeholder methods (`check` and `run`) but lacks actual exploit implementation or technical details.

Description

In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01716533; Issue ID: MSV-6309.

Exploits (1)

github STUB 1 stars
by HermesNA-1 · pythonpoc
https://github.com/HermesNA-1/SnakeSploit/tree/main/data/modules_generated/cve-2026-20463_modem_there.py

This repository contains an auto-generated stub module for CVE-2026-20463, a local privilege escalation (LPE) vulnerability in MediaTek modem firmware due to a permissions bypass. The code includes placeholder methods (`check` and `run`) but lacks actual exploit implementation or technical details.

Classification
Stub 99%
Attack Type
Lpe
Complexity
Moderate
Reliability
Theoretical
Target: MediaTek modem firmware (unspecified version)
Auth required
Prerequisites: Attacker must already have System privilege on the target device · Access to the modem interface (local attack vector)
mistral-large-3 · analyzed Jul 09, 2026 Full analysis →

References (1)

Core 1

Scores

CVSS v3 6.7
EPSS 0.0011
EPSS Percentile 1.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-280
Status published
Products (50)
MediaTek, Inc./MediaTek chipset MT2716
MediaTek, Inc./MediaTek chipset MT2735
MediaTek, Inc./MediaTek chipset MT2737
MediaTek, Inc./MediaTek chipset MT6739
MediaTek, Inc./MediaTek chipset MT6761
MediaTek, Inc./MediaTek chipset MT6762
MediaTek, Inc./MediaTek chipset MT6763
MediaTek, Inc./MediaTek chipset MT6765
MediaTek, Inc./MediaTek chipset MT6767
MediaTek, Inc./MediaTek chipset MT6768
... and 40 more
Published Jul 01, 2026
Tracked Since Jul 01, 2026