CVE-2026-20433

N/A

Description

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460.

CVE Details

CVSS v3.1 ScoreN/A

Published4/7/2026

Last Modified4/7/2026

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-787

References

https://corp.mediatek.com/product-security-bulletin/April-2026(security@mediatek.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.