Public vulnerability disclosure
CVE-2026-20560
CVE-2026-20560
publishedCWE-125
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01870543; Issue ID: MSV-9070.
Technical severityUnscoredNo score in collected sources
Published2026-11-02Source updated 2026-11-02
Collected2026-11-021 attributed source
Fixes and workarounds
No remediation reported in collected sources.
Missing remediation information is not evidence that no patch exists.
Affected products and versions
| Product | Versions | Authority |
|---|---|---|
| MediaTek chipset MediaTek, Inc. |
MT2716 (affected) MT6835 (affected) MT6878 (affected) MT6897 (affected) MT6899 (affected) MT8676 (affected) MT8755 (affected) MT8775 (affected) MT8792 (affected) MT8793 (affected) MT8863 (affected) MT8873 (affected) MT8883 (affected) Other versions: unaffected |
CNA: MediaTek |
Version ranges are source assertions. Check the vendor advisory and your installed configuration before determining exposure.
CVSS assessments
No CVSS assessment reported. An unscored record is not a low-severity determination.
Exploit evidence
No exploit evidence in collected sources. This is not proof of no exploitation.