high8.0
CVE-2026-20432
In Modem, there is a possible out of bounds write due to a missing bounds check.
Impact
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01406170; Issue ID: MSV-4461.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediatek | Mt2735 Firmware | All versions |
| Mediatek | Mt2737 Firmware | All versions |
| Mediatek | Mt6779 Firmware | All versions |
| Mediatek | Mt6781 Firmware | All versions |
| Mediatek | Mt6783 Firmware | All versions |
| Mediatek | Mt8781 Firmware | All versions |
| Mediatek | Mt8789 Firmware | All versions |
| Mediatek | Mt8791 Firmware | All versions |
| Mediatek | Mt8791t Firmware | All versions |
| Mediatek | Mt8792 Firmware | All versions |
| Mediatek | Mt8793 Firmware | All versions |
| Mediatek | Mt8795t Firmware | All versions |