CVE-2026-20479 PUBLISHED

Assigner: MediaTek
Reserved: 03.11.2025 Published: 03.08.2026 Updated: 03.08.2026

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00741071; Issue ID: MSV-7620.

Product Status

Vendor MediaTek, Inc.
Product MediaTek chipset
Versions Default: unaffected
  • Version MT2735 is affected
  • Version MT6833 is affected
  • Version MT6853 is affected
  • Version MT6855 is affected
  • Version MT6873 is affected
  • Version MT6875 is affected
  • Version MT6877 is affected
  • Version MT6880 is affected
  • Version MT6883 is affected
  • Version MT6885 is affected
  • Version MT6889 is affected
  • Version MT6890 is affected
  • Version MT6891 is affected
  • Version MT6893 is affected
  • Version MT8675 is affected
  • Version MT8771 is affected
  • Version MT8791 is affected
  • Version MT8791T is affected
  • Version MT8797 is affected

References

Problem Types

  • CWE-125 Out-of-bounds Read CWE