CVE-2026-20525
MediaTek chipset: In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with
MediaTek, Inc. MediaTek chipset
CVSS
5.3MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.21%Chance of exploitation activity in the next 30 days, higher than 10% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01870473 / MOLY00814393; Issue ID: MSV-9041.
Text from CVE List
Affected versions 22
- MediaTek chipsetaffected: MT2716CVE List
- MediaTek chipsetaffected: MT6835CVE List
- MediaTek chipsetaffected: MT6858CVE List
- MediaTek chipsetaffected: MT6878CVE List
- MediaTek chipsetaffected: MT6881CVE List
- MediaTek chipsetaffected: MT6897CVE List
- MediaTek chipsetaffected: MT6899CVE List
- MediaTek chipsetaffected: MT6982CVE List
- MediaTek chipsetaffected: MT6986CVE List
- MediaTek chipsetaffected: MT6988CVE List
- MediaTek chipsetaffected: MT6991CVE List
- MediaTek chipsetaffected: MT6993CVE List
- MediaTek chipsetaffected: MT8668CVE List
- MediaTek chipsetaffected: MT8676CVE List
- MediaTek chipsetaffected: MT8678CVE List
- MediaTek chipsetaffected: MT8755CVE List
- MediaTek chipsetaffected: MT8775CVE List
- MediaTek chipsetaffected: MT8792CVE List
- MediaTek chipsetaffected: MT8793CVE List
- MediaTek chipsetaffected: MT8863CVE List
- MediaTek chipsetaffected: MT8873CVE List
- MediaTek chipsetaffected: MT8883CVE List