CVSS 5.3 (medium) · published 2026-11-02
In Modem, there is a possible out of bounds read due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01758225; Issue ID: MSV-8910.
Affected products (NVD): mediatek mt6985_firmware, mediatek mt6986_firmware, mediatek mt6988_firmware, mediatek mt6989_firmware, mediatek mt6990_firmware, mediatek mt6991_firmware, mediatek mt6993_firmware, mediatek mt8668_firmware, mediatek mt8676_firmware, mediatek mt8678_firmware, mediatek mt8755_firmware, mediatek mt8765_firmware, mediatek mt8766_firmware, mediatek mt8766r_firmware, mediatek mt8768_firmware, mediatek mt8771_firmware, mediatek mt8775_firmware, mediatek mt8781_firmware, mediatek mt8786_firmware, mediatek mt8788e_firmware
Weakness: CWE-125
Source: NVD CVE-2026-20596
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.