Vulnerability Description
In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mediatek | Mt6813 Firmware | - |
| Mediatek | Mt6813 | - |
| Mediatek | Mt6815 Firmware | - |
| Mediatek | Mt6815 | - |
| Mediatek | Mt6835 Firmware | - |
| Mediatek | Mt6835 | - |
| Mediatek | Mt6878 Firmware | - |
| Mediatek | Mt6878 | - |
| Mediatek | Mt6897 Firmware | - |
| Mediatek | Mt6897 | - |
| Mediatek | Mt6899 Firmware | - |
| Mediatek | Mt6899 | - |
| Mediatek | Mt6986 Firmware | - |
| Mediatek | Mt6986 | - |
| Mediatek | Mt6991 Firmware | - |
| Mediatek | Mt6991 | - |
| Mediatek | Mt6993 Firmware | - |
| Mediatek | Mt6993 | - |
| Mediatek | Mt8668 Firmware | - |
| Mediatek | Mt8668 | - |
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-20431?
CVE-2026-20431 is a vulnerability with a CVSS score of 6.5 (MEDIUM). In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no addition...
How severe is CVE-2026-20431?
CVE-2026-20431 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-20431?
Check the references section above for vendor advisories and patch information. Affected products include: Mediatek Mt6813 Firmware, Mediatek Mt6813, Mediatek Mt6815 Firmware, Mediatek Mt6815, Mediatek Mt6835 Firmware.