Vulnerability Description
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mediatek | Mt2735 Firmware | - |
| Mediatek | Mt2735 | - |
| Mediatek | Mt2737 Firmware | - |
| Mediatek | Mt2737 | - |
| Mediatek | Mt6833 Firmware | - |
| Mediatek | Mt6833 | - |
| Mediatek | Mt6835 Firmware | - |
| Mediatek | Mt6835 | - |
| Mediatek | Mt6853 Firmware | - |
| Mediatek | Mt6853 | - |
| Mediatek | Mt6855 Firmware | - |
| Mediatek | Mt6855 | - |
| Mediatek | Mt6858 Firmware | - |
| Mediatek | Mt6858 | - |
| Mediatek | Mt6873 Firmware | - |
| Mediatek | Mt6873 | - |
| Mediatek | Mt6875 Firmware | - |
| Mediatek | Mt6875 | - |
| Mediatek | Mt6877 Firmware | - |
| Mediatek | Mt6877 | - |
Related Weaknesses (CWE)
References
- https://corp.mediatek.com/product-security-bulletin/May-2026Vendor Advisory
FAQ
What is CVE-2026-20450?
CVE-2026-20450 is a vulnerability with a CVSS score of 6.5 (MEDIUM). In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with ...
How severe is CVE-2026-20450?
CVE-2026-20450 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-20450?
Check the references section above for vendor advisories and patch information. Affected products include: Mediatek Mt2735 Firmware, Mediatek Mt2735, Mediatek Mt2737 Firmware, Mediatek Mt2737, Mediatek Mt6833 Firmware.