CVE-2026-20500

EUVD-2026-72193
In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 0.56%
Affected Products (NVD)
VendorProductVersion
mediatekmt2716_firmware
-
mediatekmt6835_firmware
-
mediatekmt6858_firmware
-
mediatekmt6878_firmware
-
mediatekmt6881_firmware
-
mediatekmt6897_firmware
-
mediatekmt6899_firmware
-
mediatekmt6982vb_firmware
-
mediatekmt6986_firmware
-
mediatekmt6988_firmware
-
mediatekmt6991_firmware
-
mediatekmt6993_firmware
-
mediatekmt8668_firmware
-
mediatekmt8676_firmware
-
mediatekmt8678_firmware
-
mediatekmt8755_firmware
-
mediatekmt8775_firmware
-
mediatekmt8792_firmware
-
mediatekmt8793_firmware
-
mediatekmt8863_firmware
-
mediatekmt8873_firmware
-
mediatekmt8883_firmware
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.mediatek.com/product-security-bulletin/September-2026