6.5
Medium
CVE-2026-20405 In Modem, there is a possible system crash due to a missing bounds check
Description
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01688495; Issue ID: MSV-4818.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MT2735, MT2737, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6896, MT6897, MT6899, MT6980, MT6983, MT6985, MT6986, MT6989, MT69... | Versions not published | |
| MT2735 | Versions not published | |
| MT2737 | Versions not published | |
| MT6813 | Versions not published | |
| MT6815 | Versions not published | |
| MT6833 | Versions not published | |
| MT6835 | Versions not published | |
| MT6853 | Versions not published | |
| MT6855 | Versions not published |
Show the 45 other branches Hide the 45 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| MT6858 | Versions not published | |
| MT6873 | Versions not published | |
| MT6875 | Versions not published | |
| MT6877 | Versions not published | |
| MT6878 | Versions not published | |
| MT6879 | Versions not published | |
| MT6880 | Versions not published | |
| MT6883 | Versions not published | |
| MT6885 | Versions not published | |
| MT6886 | Versions not published | |
| MT6889 | Versions not published | |
| MT6890 | Versions not published | |
| MT6891 | Versions not published | |
| MT6893 | Versions not published | |
| MT6895 | Versions not published | |
| MT6896 | Versions not published | |
| MT6897 | Versions not published | |
| MT6899 | Versions not published | |
| MT6980 | Versions not published | |
| MT6983 | Versions not published | |
| MT6985 | Versions not published | |
| MT6986 | Versions not published | |
| MT6989 | Versions not published | |
| MT6990 | Versions not published | |
| MT6991 | Versions not published | |
| MT6993 | Versions not published | |
| MT8668 | Versions not published | |
| MT8673 | Versions not published | |
| MT8675 | Versions not published | |
| MT8676 | Versions not published | |
| MT8678 | Versions not published | |
| MT8755 | Versions not published | |
| MT8771 | Versions not published | |
| MT8791 | Versions not published | |
| MT8791T | Versions not published | |
| MT8792 | Versions not published | |
| MT8793 | Versions not published | |
| MT8795T | Versions not published | |
| MT8797 | Versions not published | |
| MT8798 | Versions not published | |
| MT8863 | Versions not published | |
| MT8873 | Versions not published | |
| MT8883 | Versions not published | |
| MT8893 | Versions not published | |
| MediaTek chipset | Versions not published |
Other CVEs of MT2735, MT2737, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6896, MT6897, MT6899, MT6980, MT6983, MT6985, MT6986, MT6989, MT69...
The 5 CVEs of MT2735, MT2737, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6896, MT6897, MT6899, MT6980, MT6983, MT6985, MT6986, MT6989, MT69... →
CVE-2026-20406
In Modem, there is a possible system crash due to an uncaught exception
6.5
Medium
CVE-2026-20404
In Modem, there is a possible system crash due to improper input validation
6.5
Medium
CVE-2026-20422
In Modem, there is a possible system crash due to improper input validation
6.5
Medium
CVE-2026-20420
In Modem, there is a possible system crash due to incorrect error handling
6.5
Medium