CVE-2026-20450
Modem Remote Denial of Service via Error Handling Flaw
Publication date: 2026-05-04
Last updated on: 2026-05-07
Assigner: MediaTek, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| mediatek | mt2735_firmware | * |
| mediatek | mt2737_firmware | * |
| mediatek | mt6833_firmware | * |
| mediatek | mt6835_firmware | * |
| mediatek | mt6853_firmware | * |
| mediatek | mt6855_firmware | * |
| mediatek | mt6858_firmware | * |
| mediatek | mt6873_firmware | * |
| mediatek | mt6875_firmware | * |
| mediatek | mt6877_firmware | * |
| mediatek | mt6878_firmware | * |
| mediatek | mt6879_firmware | * |
| mediatek | mt6880_firmware | * |
| mediatek | mt6883_firmware | * |
| mediatek | mt6885_firmware | * |
| mediatek | mt6886_firmware | * |
| mediatek | mt6889_firmware | * |
| mediatek | mt6890_firmware | * |
| mediatek | mt6891_firmware | * |
| mediatek | mt6893_firmware | * |
| mediatek | mt6895_firmware | * |
| mediatek | mt6896_firmware | * |
| mediatek | mt6897_firmware | * |
| mediatek | mt6899_firmware | * |
| mediatek | mt6980_firmware | * |
| mediatek | mt6983_firmware | * |
| mediatek | mt6985_firmware | * |
| mediatek | mt6986_firmware | * |
| mediatek | mt6989_firmware | * |
| mediatek | mt6990_firmware | * |
| mediatek | mt6991_firmware | * |
| mediatek | mt6993_firmware | * |
| mediatek | mt8668_firmware | * |
| mediatek | mt8673_firmware | * |
| mediatek | mt8675_firmware | * |
| mediatek | mt8676_firmware | * |
| mediatek | mt8678_firmware | * |
| mediatek | mt8755_firmware | * |
| mediatek | mt8771_firmware | * |
| mediatek | mt8775_firmware | * |
| mediatek | mt8791_firmware | * |
| mediatek | mt8791t_firmware | * |
| mediatek | mt8792_firmware | * |
| mediatek | mt8793_firmware | * |
| mediatek | mt8795t_firmware | * |
| mediatek | mt8797_firmware | * |
| mediatek | mt8798_firmware | * |
| mediatek | mt8863_firmware | * |
| mediatek | mt8873_firmware | * |
| mediatek | mt8883_firmware | * |
| mediatek | mt8893_firmware | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-617 | The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in a modem where incorrect error handling can cause a system crash.
An attacker can exploit this by setting up a rogue base station that a user equipment (UE) connects to, leading to a remote denial of service without requiring any user interaction or additional execution privileges.
How can this vulnerability impact me? :
The primary impact of this vulnerability is a remote denial of service condition on the affected modem.
This means that if your device connects to a malicious base station controlled by an attacker, the device could crash and become unavailable.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, apply the security patch identified as MOLY01753620 provided by MediaTek.
Ensure that your device OEM has integrated this patch into your device firmware or software updates.
Avoid connecting to unknown or rogue base stations to reduce the risk of exploitation.