All vulnerabilities
CVE-2026-20540

MediaTek chipset: In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, w

MediaTek, Inc. MediaTek chipset
Open in ThreatlineRecord JSON
CVSS
5.3Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.18%Chance of exploitation activity in the next 30 days, higher than 7% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published5 Oct 2026Updated 5 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01774038; Issue ID: MSV-8912.

Text from CVE List

Affected versions 30

  • MediaTek chipsetaffected: MT2716CVE List
  • MediaTek chipsetaffected: MT2735CVE List
  • MediaTek chipsetaffected: MT2737CVE List
  • MediaTek chipsetaffected: MT6739CVE List
  • MediaTek chipsetaffected: MT6761CVE List
  • MediaTek chipsetaffected: MT6762CVE List
  • MediaTek chipsetaffected: MT6763CVE List
  • MediaTek chipsetaffected: MT6765CVE List
  • MediaTek chipsetaffected: MT6767CVE List
  • MediaTek chipsetaffected: MT6768CVE List
  • MediaTek chipsetaffected: MT6769CVE List
  • MediaTek chipsetaffected: MT6771CVE List
  • MediaTek chipsetaffected: MT6779CVE List
  • MediaTek chipsetaffected: MT6781CVE List
  • MediaTek chipsetaffected: MT6783CVE List
  • MediaTek chipsetaffected: MT6785CVE List
  • MediaTek chipsetaffected: MT6789CVE List
  • MediaTek chipsetaffected: MT6813CVE List
  • MediaTek chipsetaffected: MT6815CVE List
  • MediaTek chipsetaffected: MT6833CVE List
  • MediaTek chipsetaffected: MT6835CVE List
  • MediaTek chipsetaffected: MT6853CVE List
  • MediaTek chipsetaffected: MT6855CVE List
  • MediaTek chipsetaffected: MT6858CVE List
  • MediaTek chipsetaffected: MT6873CVE List
  • MediaTek chipsetaffected: MT6875CVE List
  • MediaTek chipsetaffected: MT6877CVE List
  • MediaTek chipsetaffected: MT6878CVE List
  • MediaTek chipsetaffected: MT6879CVE List
  • MediaTek chipsetaffected: MT6880CVE List

References 1