CVE-2026-20433: mediatek, inc. mediatek chipset Out-of-bounds Write
Vulnerability summary
CVE-2026-20433 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in mediatek, inc. mediatek chipset. EPSS estimates a 0.34% chance of exploitation in the next 30 days, higher than 26.1% of scored vulnerabilities.
Timeline
- 07-04-2026PublishedVulnerability first disclosed.
- 08-04-2026Last modifiedVulnerability information updated.
Description
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST8.8HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.34%
Chance of exploitation in the next 30 days
Percentile
26%
Versus all other CVEs
30-day change
0.00 pp
From 0.34% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Mediatek62 products
Mediatek, inc.1 product
- mediatek chipsetMT2735 | MT2737 | MT6813 | MT6833 | MT6833P | MT6835 | MT6835T | MT6853 | MT6853T | MT6855 | MT6855T | MT6873 | MT6875 | MT6875T | MT6877 | MT6877T | MT6877TT | MT6878 | MT6878M | MT6879 | MT6880 | MT6883 | MT6885 | MT6886 | MT6889 | MT6890 | MT6891 | MT6893 | MT6895 | MT6895TT | MT6896 | MT6897 | MT6899 | MT6980 | MT6980D | MT6983 | MT6983T | MT6985 | MT6985T | MT6989 | MT6989T | MT6990 | MT6991 | MT8668 | MT8673 | MT8675 | MT8676 | MT8678 | MT8755 | MT8771 | MT8775 | MT8791 | MT8791T | MT8792 | MT8793 | MT8795T | MT8797 | MT8798 | MT8863 | MT8873 | MT8883 | MT8893
2 vendors · 63 products
References
1 links- corp.mediatek.com/product-security-bulletin/April-2026Vendor Advisory