6.5

CVE-2026-20431

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mediatek ≫ Mt6813 Firmware Version -
   Mediatek ≫ Mt6813 Version -
Mediatek ≫ Mt6815 Firmware Version -
   Mediatek ≫ Mt6815 Version -
Mediatek ≫ Mt6835 Firmware Version -
   Mediatek ≫ Mt6835 Version -
Mediatek ≫ Mt6878 Firmware Version -
   Mediatek ≫ Mt6878 Version -
Mediatek ≫ Mt6897 Firmware Version -
   Mediatek ≫ Mt6897 Version -
Mediatek ≫ Mt6899 Firmware Version -
   Mediatek ≫ Mt6899 Version -
Mediatek ≫ Mt6986 Firmware Version -
   Mediatek ≫ Mt6986 Version -
Mediatek ≫ Mt6991 Firmware Version -
   Mediatek ≫ Mt6991 Version -
Mediatek ≫ Mt6993 Firmware Version -
   Mediatek ≫ Mt6993 Version -
Mediatek ≫ Mt8668 Firmware Version -
   Mediatek ≫ Mt8668 Version -
Mediatek ≫ Mt8676 Firmware Version -
   Mediatek ≫ Mt8676 Version -
Mediatek ≫ Mt8678 Firmware Version -
   Mediatek ≫ Mt8678 Version -
Mediatek ≫ Mt8755 Firmware Version -
   Mediatek ≫ Mt8755 Version -
Mediatek ≫ Mt8775 Firmware Version -
   Mediatek ≫ Mt8775 Version -
Mediatek ≫ Mt8792 Firmware Version -
   Mediatek ≫ Mt8792 Version -
Mediatek ≫ Mt8793 Firmware Version -
   Mediatek ≫ Mt8793 Version -
Mediatek ≫ Mt8863 Firmware Version -
   Mediatek ≫ Mt8863 Version -
Mediatek ≫ Mt8873 Firmware Version -
   Mediatek ≫ Mt8873 Version -
Mediatek ≫ Mt8883 Firmware Version -
   Mediatek ≫ Mt8883 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.31% 0.223
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

https://corp.mediatek.com/product-security-bulletin/April-2026
Vendor Advisory