CVE-2026-20525
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01870473 / MOLY00814393; Issue ID: MSV-9041.
- CVSS 3.1
- 5.3
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-25)
- CWE
- CWE-617
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mediatek:mt2716_firmware
- mediatek:mt6835_firmware
- mediatek:mt6858_firmware
- mediatek:mt6878_firmware
- mediatek:mt6881_firmware
- mediatek:mt6897_firmware
- mediatek:mt6899_firmware
- mediatek:mt6982_firmware
- mediatek:mt6986_firmware
- mediatek:mt6988_firmware
- mediatek:mt6991_firmware
- mediatek:mt6993_firmware
- mediatek:mt8668_firmware
- mediatek:mt8676_firmware
- mediatek:mt8678_firmware
- mediatek:mt8755_firmware
- mediatek:mt8775_firmware
- mediatek:mt8792_firmware
- mediatek:mt8793_firmware
- mediatek:mt8863_firmware
- mediatek:mt8873_firmware
- mediatek:mt8883_firmware