CVE-2026-20433
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track*
*SSVC
Descriptions
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460.
En el módem, existe una posible escritura fuera de límites debido a una falta de verificación de límites. Esto podría llevar a una escalada remota de privilegios, si un UE se ha conectado a una estación base maliciosa controlada por el atacante, sin necesidad de privilegios de ejecución adicionales. Se requiere interacción del usuario para la explotación. ID del parche: MOLY01088681; ID del problema: MSV-4460.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track*
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2025-11-03 CVE Reserved
- 2026-04-07 CVE Published
- 2026-04-10 CVE Updated
- 2026-05-09 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-787: Out-of-bounds Write
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://corp.mediatek.com/product-security-bulletin/April-2026 | 2026-04-08 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mediatek Search vendor "Mediatek" | Mt2735 Firmware Search vendor "Mediatek" for product "Mt2735 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt2735 Search vendor "Mediatek" for product "Mt2735" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt2737 Firmware Search vendor "Mediatek" for product "Mt2737 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt2737 Search vendor "Mediatek" for product "Mt2737" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6813 Firmware Search vendor "Mediatek" for product "Mt6813 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6813 Search vendor "Mediatek" for product "Mt6813" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6833 Firmware Search vendor "Mediatek" for product "Mt6833 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6833 Search vendor "Mediatek" for product "Mt6833" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6833p Firmware Search vendor "Mediatek" for product "Mt6833p Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6833p Search vendor "Mediatek" for product "Mt6833p" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6835 Firmware Search vendor "Mediatek" for product "Mt6835 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6835 Search vendor "Mediatek" for product "Mt6835" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6835t Firmware Search vendor "Mediatek" for product "Mt6835t Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6835t Search vendor "Mediatek" for product "Mt6835t" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6853 Firmware Search vendor "Mediatek" for product "Mt6853 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6853 Search vendor "Mediatek" for product "Mt6853" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6853t Firmware Search vendor "Mediatek" for product "Mt6853t Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6853t Search vendor "Mediatek" for product "Mt6853t" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6855 Firmware Search vendor "Mediatek" for product "Mt6855 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6855 Search vendor "Mediatek" for product "Mt6855" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6855t Firmware Search vendor "Mediatek" for product "Mt6855t Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6855t Search vendor "Mediatek" for product "Mt6855t" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6873 Firmware Search vendor "Mediatek" for product "Mt6873 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6873 Search vendor "Mediatek" for product "Mt6873" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6875 Firmware Search vendor "Mediatek" for product "Mt6875 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6875 Search vendor "Mediatek" for product "Mt6875" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6875t Firmware Search vendor "Mediatek" for product "Mt6875t Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6875t Search vendor "Mediatek" for product "Mt6875t" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6877 Firmware Search vendor "Mediatek" for product "Mt6877 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6877 Search vendor "Mediatek" for product "Mt6877" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6877t Firmware Search vendor "Mediatek" for product "Mt6877t Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6877t Search vendor "Mediatek" for product "Mt6877t" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6877tt Firmware Search vendor "Mediatek" for product "Mt6877tt Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6877tt Search vendor "Mediatek" for product "Mt6877tt" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6878 Firmware Search vendor "Mediatek" for product "Mt6878 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6878 Search vendor "Mediatek" for product "Mt6878" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6878m Firmware Search vendor "Mediatek" for product "Mt6878m Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6878m Search vendor "Mediatek" for product "Mt6878m" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6879 Firmware Search vendor "Mediatek" for product "Mt6879 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6879 Search vendor "Mediatek" for product "Mt6879" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6880 Firmware Search vendor "Mediatek" for product "Mt6880 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6880 Search vendor "Mediatek" for product "Mt6880" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6883 Firmware Search vendor "Mediatek" for product "Mt6883 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6883 Search vendor "Mediatek" for product "Mt6883" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6885 Firmware Search vendor "Mediatek" for product "Mt6885 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6885 Search vendor "Mediatek" for product "Mt6885" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6886 Firmware Search vendor "Mediatek" for product "Mt6886 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6886 Search vendor "Mediatek" for product "Mt6886" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6889 Firmware Search vendor "Mediatek" for product "Mt6889 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6889 Search vendor "Mediatek" for product "Mt6889" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6890 Firmware Search vendor "Mediatek" for product "Mt6890 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6890 Search vendor "Mediatek" for product "Mt6890" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6891 Firmware Search vendor "Mediatek" for product "Mt6891 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6891 Search vendor "Mediatek" for product "Mt6891" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6893 Firmware Search vendor "Mediatek" for product "Mt6893 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6893 Search vendor "Mediatek" for product "Mt6893" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6895 Firmware Search vendor "Mediatek" for product "Mt6895 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6895 Search vendor "Mediatek" for product "Mt6895" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6895tt Firmware Search vendor "Mediatek" for product "Mt6895tt Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6895tt Search vendor "Mediatek" for product "Mt6895tt" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6896 Firmware Search vendor "Mediatek" for product "Mt6896 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6896 Search vendor "Mediatek" for product "Mt6896" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6897 Firmware Search vendor "Mediatek" for product "Mt6897 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6897 Search vendor "Mediatek" for product "Mt6897" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6899 Firmware Search vendor "Mediatek" for product "Mt6899 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6899 Search vendor "Mediatek" for product "Mt6899" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6980 Firmware Search vendor "Mediatek" for product "Mt6980 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6980 Search vendor "Mediatek" for product "Mt6980" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6980d Firmware Search vendor "Mediatek" for product "Mt6980d Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6980d Search vendor "Mediatek" for product "Mt6980d" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6983 Firmware Search vendor "Mediatek" for product "Mt6983 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6983 Search vendor "Mediatek" for product "Mt6983" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6983t Firmware Search vendor "Mediatek" for product "Mt6983t Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6983t Search vendor "Mediatek" for product "Mt6983t" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6985 Firmware Search vendor "Mediatek" for product "Mt6985 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6985 Search vendor "Mediatek" for product "Mt6985" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6985t Firmware Search vendor "Mediatek" for product "Mt6985t Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6985t Search vendor "Mediatek" for product "Mt6985t" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6989 Firmware Search vendor "Mediatek" for product "Mt6989 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6989 Search vendor "Mediatek" for product "Mt6989" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6989t Firmware Search vendor "Mediatek" for product "Mt6989t Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6989t Search vendor "Mediatek" for product "Mt6989t" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6990 Firmware Search vendor "Mediatek" for product "Mt6990 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6990 Search vendor "Mediatek" for product "Mt6990" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt6991 Firmware Search vendor "Mediatek" for product "Mt6991 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt6991 Search vendor "Mediatek" for product "Mt6991" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8668 Firmware Search vendor "Mediatek" for product "Mt8668 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8668 Search vendor "Mediatek" for product "Mt8668" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8673 Firmware Search vendor "Mediatek" for product "Mt8673 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8673 Search vendor "Mediatek" for product "Mt8673" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8675 Firmware Search vendor "Mediatek" for product "Mt8675 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8675 Search vendor "Mediatek" for product "Mt8675" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8676 Firmware Search vendor "Mediatek" for product "Mt8676 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8676 Search vendor "Mediatek" for product "Mt8676" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8678 Firmware Search vendor "Mediatek" for product "Mt8678 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8678 Search vendor "Mediatek" for product "Mt8678" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8755 Firmware Search vendor "Mediatek" for product "Mt8755 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8755 Search vendor "Mediatek" for product "Mt8755" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8771 Firmware Search vendor "Mediatek" for product "Mt8771 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8771 Search vendor "Mediatek" for product "Mt8771" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8775 Firmware Search vendor "Mediatek" for product "Mt8775 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8775 Search vendor "Mediatek" for product "Mt8775" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8791 Firmware Search vendor "Mediatek" for product "Mt8791 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8791 Search vendor "Mediatek" for product "Mt8791" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8791t Firmware Search vendor "Mediatek" for product "Mt8791t Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8791t Search vendor "Mediatek" for product "Mt8791t" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8792 Firmware Search vendor "Mediatek" for product "Mt8792 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8792 Search vendor "Mediatek" for product "Mt8792" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8793 Firmware Search vendor "Mediatek" for product "Mt8793 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8793 Search vendor "Mediatek" for product "Mt8793" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8795t Firmware Search vendor "Mediatek" for product "Mt8795t Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8795t Search vendor "Mediatek" for product "Mt8795t" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8797 Firmware Search vendor "Mediatek" for product "Mt8797 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8797 Search vendor "Mediatek" for product "Mt8797" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8798 Firmware Search vendor "Mediatek" for product "Mt8798 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8798 Search vendor "Mediatek" for product "Mt8798" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8863 Firmware Search vendor "Mediatek" for product "Mt8863 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8863 Search vendor "Mediatek" for product "Mt8863" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8873 Firmware Search vendor "Mediatek" for product "Mt8873 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8873 Search vendor "Mediatek" for product "Mt8873" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8883 Firmware Search vendor "Mediatek" for product "Mt8883 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8883 Search vendor "Mediatek" for product "Mt8883" | - | - |
Safe
|
| Mediatek Search vendor "Mediatek" | Mt8893 Firmware Search vendor "Mediatek" for product "Mt8893 Firmware" | - | - |
Affected
| in | Mediatek Search vendor "Mediatek" | Mt8893 Search vendor "Mediatek" for product "Mt8893" | - | - |
Safe
|