Dashboard / CVE-2026-20433

CVE-2026-20433

HIGH
MEDIUM Priority: 0.03 BB Relevance: 63/100
Published: 2026-04-07 Modified: 2026-11-02 First seen: 2026-11-02 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460.

Weakness Classification (1)

Affected Software (124)

VendorProductVersion
MediaTek, Inc. MediaTek chipset MT2735
MediaTek, Inc. MediaTek chipset MT2737
MediaTek, Inc. MediaTek chipset MT6813
MediaTek, Inc. MediaTek chipset MT6833
MediaTek, Inc. MediaTek chipset MT6833P
MediaTek, Inc. MediaTek chipset MT6835
MediaTek, Inc. MediaTek chipset MT6835T
MediaTek, Inc. MediaTek chipset MT6853
MediaTek, Inc. MediaTek chipset MT6853T
MediaTek, Inc. MediaTek chipset MT6855
MediaTek, Inc. MediaTek chipset MT6855T
MediaTek, Inc. MediaTek chipset MT6873
MediaTek, Inc. MediaTek chipset MT6875
MediaTek, Inc. MediaTek chipset MT6875T
MediaTek, Inc. MediaTek chipset MT6877
MediaTek, Inc. MediaTek chipset MT6877T
MediaTek, Inc. MediaTek chipset MT6877TT
MediaTek, Inc. MediaTek chipset MT6878
MediaTek, Inc. MediaTek chipset MT6878M
MediaTek, Inc. MediaTek chipset MT6879
MediaTek, Inc. MediaTek chipset MT6880
MediaTek, Inc. MediaTek chipset MT6883
MediaTek, Inc. MediaTek chipset MT6885
MediaTek, Inc. MediaTek chipset MT6886
MediaTek, Inc. MediaTek chipset MT6889
MediaTek, Inc. MediaTek chipset MT6890
MediaTek, Inc. MediaTek chipset MT6891
MediaTek, Inc. MediaTek chipset MT6893
MediaTek, Inc. MediaTek chipset MT6895
MediaTek, Inc. MediaTek chipset MT6895TT
Showing 30 of 124 entries

References & Advisories (1)

Bug Bounty Relevance

63 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

8.8 / 10.0 v3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.31%
Raw Score 0.003100
Percentile 24.2%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00310
2026-11-12
0.00310
2026-11-10
0.00310
2026-11-09
0.00310
2026-11-08
0.00310
2026-11-07
0.00310
2026-11-06
0.00310
2026-11-05
0.00310
2026-11-04
0.00310
2026-11-03
0.00296
2026-11-02
0.00341

Intelligence Sources

mitre ref →
nvd ref →

External Links