CVE-2026-20534: mediatek, inc. mediatek chipset Out-of-bounds Read
Vulnerability summary
CVE-2026-20534 is a medium (CVSS 5.3) Out-of-bounds Read vulnerability in mediatek, inc. mediatek chipset. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 7.3% of scored vulnerabilities.
Timeline
- 05-10-2026PublishedVulnerability first disclosed.
- 05-10-2026Last modifiedVulnerability information updated.
Description
In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01797547; Issue ID: MSV-9155.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST5.3MediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.18%
Chance of exploitation in the next 30 days
Percentile
7%
Versus all other CVEs
30-day change
Change unavailable
Change unavailable
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Mediatek83 products
Mediatek, inc.1 product
- mediatek chipsetMT2716 | MT2735 | MT2737 | MT6739 | MT6761 | MT6762 | MT6763 | MT6765 | MT6767 | MT6768 | MT6769 | MT6771 | MT6779 | MT6781 | MT6783 | MT6785 | MT6789 | MT6813 | MT6815 | MT6833 | MT6835 | MT6853 | MT6855 | MT6858 | MT6873 | MT6875 | MT6877 | MT6878 | MT6879 | MT6880 | MT6881 | MT6883 | MT6885 | MT6886 | MT6889 | MT6890 | MT6891 | MT6893 | MT6895 | MT6896 | MT6897 | MT6899 | MT6980 | MT6982 | MT6983 | MT6985 | MT6986 | MT6988 | MT6989 | MT6990 | MT6991 | MT6993 | MT8666 | MT8667 | MT8668 | MT8673 | MT8675 | MT8676 | MT8678 | MT8755 | MT8765 | MT8766 | MT8766R | MT8768 | MT8771 | MT8775 | MT8781 | MT8786 | MT8788 | MT8788E | MT8789 | MT8791 | MT8791T | MT8792 | MT8793 | MT8795T | MT8796 | MT8797 | MT8798 | MT8863 | MT8873 | MT8883 | MT8893
2 vendors · 84 products
References
1 links- www.mediatek.com/product-security-bulletin/October-2026Vendor Advisory