In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01879158 / MOLY01774038; Issue ID: MSV-9811.
Project Subscriptions
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Mon, 02 Nov 2026 12:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Mediatek
Mediatek mediatek Chipset Mediatek, Inc. Mediatek, Inc. mediatek Chipset |
|
| Vendors & Products |
Mediatek
Mediatek mediatek Chipset Mediatek, Inc. Mediatek, Inc. mediatek Chipset |
Mon, 02 Nov 2026 03:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Out-of-Bounds Write in Modem Enabling Privilege Escalation |
Mon, 02 Nov 2026 02:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01879158 / MOLY01774038; Issue ID: MSV-9811. | |
| Weaknesses | CWE-787 | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: MediaTek
Published:
Updated: 2026-11-02T15:10:52.758Z
Reserved: 2025-11-03T01:30:59.041Z
Link: CVE-2026-20545
No data.
Status : Received
Published: 2026-11-02T03:17:31.257
Modified: 2026-11-02T03:17:31.257
Link: CVE-2026-20545
No data.
OpenCVE Enrichment
Updated: 2026-11-02T12:15:06Z
Weaknesses