CVE-2026-20503
Received Received - Intake

System Crash Due to Missing Bounds Check in Modem

Publication date: 2026-09-07

Last updated on: 2026-09-07

Assigner: MediaTek, Inc.

Description
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01371002; Issue ID: MSV-9020.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-07
Last Modified
2026-09-07
Generated
2026-09-07
AI Q&A
2026-09-07
EPSS Evaluated
N/A
NVD
CVE-2026-20503
EUVD
EUVD-2026-72196

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mediatek modem *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-617 The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in Modem is a missing bounds check that could cause a system crash. It may lead to remote denial of service if a user equipment connects to a malicious base station controlled by an attacker. No additional privileges or user interaction are required for exploitation.

Impact Analysis

If exploited, this vulnerability could crash your device, making it unavailable for use. This could disrupt communication services like calls or data, especially if your device connects to a compromised network.

Compliance Impact

This vulnerability could lead to remote denial of service, potentially disrupting system availability. While not directly impacting GDPR or HIPAA compliance, such disruptions may affect data processing integrity and availability requirements under these regulations.

Mitigation Strategies

Apply the provided patch ID MOLY01371002 to address the missing bounds check in the Modem component. Ensure your system is updated to the latest firmware version to prevent exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-20503. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart