In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460.
CVE-2026-20433
CVSS base score
8.8 (v3.1)
Severity
HIGH
Attack vector
Adjacent_network
Weakness
CWE-787
Last modified
November 2, 2026
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
mediatek mt2735 firmware
mediatek mt2737 firmware
mediatek mt6813 firmware
mediatek mt6833 firmware
mediatek mt6833p firmware
mediatek mt6835 firmware
mediatek mt6835t firmware
mediatek mt6853 firmware
mediatek mt6853t firmware
mediatek mt6855 firmware
References
- corp.mediatek.com Vendor Advisory