← CVE Intelligence

CVE-2026-20525

MediaTek, Inc. / MediaTek chipset PUBLISHED

Description (CNA)

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01870473 / MOLY00814393; Issue ID: MSV-9041.

Affected (CNA)

Vendor / productVersions
MediaTek, Inc. / MediaTek chipsetaffected MT2716; affected MT6835; affected MT6858; affected MT6878; affected MT6881; affected MT6897; affected MT6899; affected MT6982; affected MT6986; affected MT6988; affected MT6991; affected MT6993; affected MT8668; affected MT8676; affected MT8678; affected MT8755; affected MT8775; affected MT8792; affected MT8793; affected MT8863; affected MT8873; affected MT8883

CWE

CWE-617

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.