Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

mt6993_firmware

Source -

NVD

CNA CVEs -

0

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

2
Related CVEsRelated VendorsRelated AssignersReports
2Vulnerabilities found

CVE-2026-20432
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-8||HIGH
EPSS-0.07% / 22.14%
||
7 Day CHG+0.02%
Published-07 Apr, 2026 | 03:25
Updated-10 Apr, 2026 | 19:57
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01406170; Issue ID: MSV-4461.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6885_firmwaremt6983mt2737_firmwaremt8675mt6890_firmwaremt8781_firmwaremt6785_firmwaremt6833_firmwaremt6891_firmwaremt8676mt8792_firmwaremt6878_firmwaremt6899_firmwaremt6893_firmwaremt6895_firmwaremt6873_firmwaremt6789mt8893_firmwaremt6985_firmwaremt8771mt6833mt6815mt6890mt8791mt6880_firmwaremt6779_firmwaremt8673_firmwaremt6896_firmwaremt6990mt6886_firmwaremt6885mt8863_firmwaremt8793_firmwaremt6835_firmwaremt6991mt8771_firmwaremt6877_firmwaremt6853_firmwaremt8668_firmwaremt6993mt6781_firmwaremt8893mt6893mt6879_firmwaremt8797_firmwaremt8676_firmwaremt8883_firmwaremt8789mt8791t_firmwaremt8792mt8873_firmwaremt6853mt2735mt6993_firmwaremt8678mt8863mt6897_firmwaremt6781mt6985mt8795t_firmwaremt6877mt8755_firmwaremt6879mt6789_firmwaremt8673mt6895mt6991_firmwaremt6785mt8775mt6891mt8791tmt8791_firmwaremt8798mt6896mt6889_firmwaremt6897mt8781mt6983_firmwaremt6889mt8795tmt6980mt6835mt6875mt8775_firmwaremt6813mt6886mt8798_firmwaremt6873mt6878mt8793mt6783mt8789_firmwaremt6989mt2737mt6779mt6883_firmwaremt6883mt6899mt6990_firmwaremt6875_firmwaremt8883mt8873mt6980_firmwaremt8668mt6880mt6815_firmwaremt6813_firmwaremt8678_firmwaremt6855_firmwaremt8675_firmwaremt2735_firmwaremt8797mt8755mt6855mt6783_firmwaremt6989_firmwareMediaTek chipset
CWE ID-CWE-787
Out-of-bounds Write
CVE-2026-20431
Assigner-MediaTek, Inc.
ShareView Details
Assigner-MediaTek, Inc.
CVSS Score-6.5||MEDIUM
EPSS-0.06% / 18.93%
||
7 Day CHG+0.01%
Published-07 Apr, 2026 | 03:25
Updated-10 Apr, 2026 | 19:58
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467.

Action-Not Available
Vendor-MediaTek Inc.
Product-mt6991_firmwaremt8775mt8676mt8792_firmwaremt6878_firmwaremt6899_firmwaremt6897mt6815mt6835mt8775_firmwaremt6813mt6878mt8793mt8863_firmwaremt6835_firmwaremt6991mt8793_firmwaremt8668_firmwaremt6993mt6899mt8883_firmwaremt8883mt8676_firmwaremt8873_firmwaremt8792mt8873mt8668mt6815_firmwaremt6813_firmwaremt6993_firmwaremt6897_firmwaremt8678_firmwaremt8678mt6986mt8863mt6986_firmwaremt8755mt8755_firmwareMediaTek chipset
CWE ID-CWE-770
Allocation of Resources Without Limits or Throttling