Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-20598 EUVD-2026-115058GHSA-v828-j22x-jhc8

In Modem, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service, if a UE has conne…

Published Nov 2, 2026 · Updated Nov 2, 2026 · Assigned by MediaTek

Description

In Modem, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01755742; Issue ID: MSV-8896.

Affected products

VendorProductAffectedFixed
MediaTek MediaTek chipset MT2716, MT6835, MT6858, MT6878, MT6881, MT6897, MT6899, MT6982, MT6986, MT6988, MT6991, MT6993, MT8668, MT8676, MT8678, MT8755, MT8775, MT8792, MT8793, MT8863, MT8873, MT8875, MT8883 —

References