CVE-2026-20450

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-05-04 · updated 2026-10-26
Weakness: CWE-617

Description

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100.

Affected products

Mediatek Mt2735 Firmware: all versions
Mediatek Mt2737 Firmware: all versions
Mediatek Mt6833 Firmware: all versions
Mediatek Mt6835 Firmware: all versions
Mediatek Mt6853 Firmware: all versions
Mediatek Mt6855 Firmware: all versions
Mediatek Mt6858 Firmware: all versions
Mediatek Mt6873 Firmware: all versions
Mediatek Mt6875 Firmware: all versions
Mediatek Mt6877 Firmware: all versions
Mediatek Mt6878 Firmware: all versions
Mediatek Mt6879 Firmware: all versions
Mediatek Mt6880 Firmware: all versions
Mediatek Mt6883 Firmware: all versions
Mediatek Mt6885 Firmware: all versions
Mediatek Mt6886 Firmware: all versions
Mediatek Mt6889 Firmware: all versions
Mediatek Mt6890 Firmware: all versions
Mediatek Mt6891 Firmware: all versions
Mediatek Mt6893 Firmware: all versions
Mediatek Mt6895 Firmware: all versions
Mediatek Mt6896 Firmware: all versions
Mediatek Mt6897 Firmware: all versions
Mediatek Mt6899 Firmware: all versions
Mediatek Mt6980 Firmware: all versions
Mediatek Mt6983 Firmware: all versions
Mediatek Mt6985 Firmware: all versions
Mediatek Mt6986 Firmware: all versions
Mediatek Mt6989 Firmware: all versions
Mediatek Mt6990 Firmware: all versions

References

https://corp.mediatek.com/product-security-bulletin/May-2026

Get alerted when CVE-2026-20450 or the next vulnerability affects your stack