CVSS 5.3 (medium) · published 2026-11-02
In Modem, there is a possible out of bounds read due to an integer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01755742; Issue ID: MSV-8896.
Affected products (NVD): mediatek mt2716_firmware, mediatek mt6835_firmware, mediatek mt6858_firmware, mediatek mt6878_firmware, mediatek mt6881_firmware, mediatek mt6897_firmware, mediatek mt6899_firmware, mediatek mt6982_firmware, mediatek mt6986_firmware, mediatek mt6988_firmware, mediatek mt6991_firmware, mediatek mt6993_firmware, mediatek mt8668_firmware, mediatek mt8676_firmware, mediatek mt8678_firmware, mediatek mt8755_firmware, mediatek mt8775_firmware, mediatek mt8792_firmware, mediatek mt8793_firmware, mediatek mt8863_firmware
Weakness: CWE-125
Source: NVD CVE-2026-20598
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.