CVSS 5.3 (medium) · published 2026-11-02
In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01707455; Issue ID: MSV-9503.
Affected products (NVD): mediatek mt2716_firmware, mediatek mt2735_firmware, mediatek mt2737_firmware, mediatek mt6739_firmware, mediatek mt6761_firmware, mediatek mt6762_firmware, mediatek mt6763_firmware, mediatek mt6765_firmware, mediatek mt6767_firmware, mediatek mt6768_firmware, mediatek mt6769_firmware, mediatek mt6771_firmware, mediatek mt6779_firmware, mediatek mt6781_firmware, mediatek mt6783_firmware, mediatek mt6785_firmware, mediatek mt6789_firmware, mediatek mt6813_firmware, mediatek mt6815_firmware, mediatek mt6833_firmware
Weakness: CWE-617
Source: NVD CVE-2026-20593
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.