Dashboard / CVE-2026-20545

CVE-2026-20545

HIGH
MEDIUM Priority: 0.02 BB Relevance: 50/100
Published: 2026-11-02 Modified: 2026-11-04 First seen: 2026-11-02 Status: active

Attack Surface

Adjacent No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: High
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01879158 / MOLY01774038; Issue ID: MSV-9811.

Weakness Classification (1)

Affected Software (462)

VendorProductVersion
MediaTek, Inc. MediaTek chipset MT2716
MediaTek, Inc. MediaTek chipset MT2735
MediaTek, Inc. MediaTek chipset MT2737
MediaTek, Inc. MediaTek chipset MT6739
MediaTek, Inc. MediaTek chipset MT6761
MediaTek, Inc. MediaTek chipset MT6762
MediaTek, Inc. MediaTek chipset MT6763
MediaTek, Inc. MediaTek chipset MT6765
MediaTek, Inc. MediaTek chipset MT6767
MediaTek, Inc. MediaTek chipset MT6768
MediaTek, Inc. MediaTek chipset MT6769
MediaTek, Inc. MediaTek chipset MT6771
MediaTek, Inc. MediaTek chipset MT6779
MediaTek, Inc. MediaTek chipset MT6781
MediaTek, Inc. MediaTek chipset MT6783
MediaTek, Inc. MediaTek chipset MT6785
MediaTek, Inc. MediaTek chipset MT6789
MediaTek, Inc. MediaTek chipset MT6813
MediaTek, Inc. MediaTek chipset MT6815
MediaTek, Inc. MediaTek chipset MT6833
MediaTek, Inc. MediaTek chipset MT6835
MediaTek, Inc. MediaTek chipset MT6853
MediaTek, Inc. MediaTek chipset MT6855
MediaTek, Inc. MediaTek chipset MT6858
MediaTek, Inc. MediaTek chipset MT6873
MediaTek, Inc. MediaTek chipset MT6875
MediaTek, Inc. MediaTek chipset MT6877
MediaTek, Inc. MediaTek chipset MT6878
MediaTek, Inc. MediaTek chipset MT6879
MediaTek, Inc. MediaTek chipset MT6880
Showing 30 of 462 entries

References & Advisories (1)

Bug Bounty Relevance

50 / 100
✓ No authentication
✓ No user interaction

CVSS Score

7.5 / 10.0 v3.1
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.24%
Raw Score 0.002420
Percentile 15.5%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00242
2026-11-12
0.00242
2026-11-10
0.00242
2026-11-09
0.00242
2026-11-08
0.00242
2026-11-07
0.00242
2026-11-06
0.00242
2026-11-05
0.00242
2026-11-04
0.00242
2026-11-03
0.00242

Intelligence Sources

mitre ref →
nvd ref →

External Links