4.6
Medium
CVE-2026-20435 In preloader, there is a possible read of device unique identifiers due to a logic error
Description
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10607099; Issue ID: MSV-6118.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MT2737 | Versions not published | |
| MT6739 | Versions not published | |
| MT6761 | Versions not published | |
| MT6765 | Versions not published | |
| MT6768 | Versions not published | |
| MT6781 | Versions not published | |
| MT6789 | Versions not published | |
| MT6813 | Versions not published | |
| MT6833 | Versions not published |
Show the 27 other branches Hide the 27 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| MT6853 | Versions not published | |
| MT6855 | Versions not published | |
| MT6877 | Versions not published | |
| MT6878 | Versions not published | |
| MT6879 | Versions not published | |
| MT6880 | Versions not published | |
| MT6885 | Versions not published | |
| MT6886 | Versions not published | |
| MT6890 | Versions not published | |
| MT6893 | Versions not published | |
| MT6895 | Versions not published | |
| MT6897 | Versions not published | |
| MT6983 | Versions not published | |
| MT6985 | Versions not published | |
| MT6989 | Versions not published | |
| MT6990 | Versions not published | |
| MT6993 | Versions not published | |
| MT8169 | Versions not published | |
| MT8186 | Versions not published | |
| MT8188 | Versions not published | |
| MT8370 | Versions not published | |
| MT8390 | Versions not published | |
| MT8676 | Versions not published | |
| MT8678 | Versions not published | |
| MT8696 | Versions not published | |
| MT8793 | Versions not published | |
| MediaTek chipset | Versions not published |
References
- corp.mediatek.com corp.mediatek.com
Timeline
- Published
- Last modified
Other CVEs of MT2737
The 12 CVEs of MT2737 →
CVE-2026-20434
In Modem, there is a possible out of bounds write due to a missing bounds check
7.5
High
CVE-2026-20406
In Modem, there is a possible system crash due to an uncaught exception
6.5
Medium
CVE-2026-20405
In Modem, there is a possible system crash due to a missing bounds check
6.5
Medium
CVE-2026-20404
In Modem, there is a possible system crash due to improper input validation
6.5
Medium