CVE-2026-20585
Full vulnerability record from the local CVENow database.
Description
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01338165; Issue ID: MSV-9660.
Severity
Not scored
CVSS score
Not available
Vulnerability status
Received
Source identifier
Published
2026-11-02 03:17:36.283000
Last modified
2026-11-02 03:17:36.283000
View original CVE JSON
{
"id": "CVE-2026-20585",
"sourceIdentifier": "[email protected]",
"published": "2026-11-02T03:17:36.283",
"lastModified": "2026-11-02T03:17:36.283",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01338165; Issue ID: MSV-9660."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "MediaTek, Inc.",
"product": "MediaTek chipset",
"defaultStatus": "unaffected",
"versions": [
{
"version": "MT2716",
"status": "affected"
},
{
"version": "MT2718",
"status": "affected"
},
{
"version": "MT2737",
"status": "affected"
},
{
"version": "MT6813",
"status": "affected"
},
{
"version": "MT6815",
"status": "affected"
},
{
"version": "MT6835",
"status": "affected"
},
{
"version": "MT6858",
"status": "affected"
},
{
"version": "MT6878",
"status": "affected"
},
{
"version": "MT6879",
"status": "affected"
},
{
"version": "MT6881",
"status": "affected"
},
{
"version": "MT6886",
"status": "affected"
},
{
"version": "MT6895",
"status": "affected"
},
{
"version": "MT6896",
"status": "affected"
},
{
"version": "MT6897",
"status": "affected"
},
{
"version": "MT6899",
"status": "affected"
},
{
"version": "MT6980",
"status": "affected"
},
{
"version": "MT6982",
"status": "affected"
},
{
"version": "MT6983",
"status": "affected"
},
{
"version": "MT6985",
"status": "affected"
},
{
"version": "MT6986",
"status": "affected"
},
{
"version": "MT6988",
"status": "affected"
},
{
"version": "MT6989",
"status": "affected"
},
{
"version": "MT6990",
"status": "affected"
},
{
"version": "MT6991",
"status": "affected"
},
{
"version": "MT6993",
"status": "affected"
},
{
"version": "MT8186",
"status": "affected"
},
{
"version": "MT8188",
"status": "affected"
},
{
"version": "MT8189",
"status": "affected"
},
{
"version": "MT8195",
"status": "affected"
},
{
"version": "MT8196",
"status": "affected"
},
{
"version": "MT8367",
"status": "affected"
},
{
"version": "MT8391",
"status": "affected"
},
{
"version": "MT8676",
"status": "affected"
},
{
"version": "MT8678",
"status": "affected"
}
]
}
]
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"references": [
{
"url": "https://www.mediatek.com/product-security-bulletin/November-2026",
"source": "[email protected]"
}
]
}