جزئیات آسیب‌پذیری

CVE-2026-20433

MediaTek chipset
CVSS 3.1
8.0بالا

شرح رسمی (انگلیسی)

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460.

امتیازهای CVSS

امتیازنسخهمنبعبردار
8.0بالا 3.1 CISA ADP / Vulnrichment (CISA-ADP) CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
MediaTek, Inc. MediaTek chipset MT2735 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT2737 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6813 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6833 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6833P CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6835 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6835T CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6853 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6853T CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6855 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6855T CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6873 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6875 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6875T CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6877 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6877T CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6877TT CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6878 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6878M CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6879 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6880 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6883 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6885 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6886 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6889 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6890 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6891 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6893 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6895 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6895TT CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6896 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6897 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6899 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6980 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6980D CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6983 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6983T CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6985 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6985T CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6989 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6989T CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6990 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT6991 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8668 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8673 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8675 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8676 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8678 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8755 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8771 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8775 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8791 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8791T CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8792 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8793 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8795T CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8797 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8798 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8863 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8873 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8883 CVEProject cvelistV5 (CNA)
MediaTek, Inc. MediaTek chipset MT8893 CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۵/۰۱/۱۸
آخرین به‌روزرسانی
۱۴۰۵/۰۸/۱۱
وضعیت
منتشرشده
صادرکننده (CNA)
MediaTek

پیش‌بینی بهره‌برداری (EPSS)

۰٫۳۱٪
احتمال بهره‌برداری در ۳۰ روز
۲۳٫۹٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
خیر
وضعیت بهره‌برداری
ندارد
اثر فنی
کامل

ضعف‌ها (CWE)

  • CWE-787
    Out-of-bounds Write