CVE-2026-20450 - Vulnerability Details - OpenCVE

In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Mediatek, Inc.	Mediatek Chipset

No data.

No data.

References

Link	Providers
https://www.spirityenterprise.com/virtual-ciso
https://corp.mediatek.com/product-security-bulletin/May-2026

History

Mon, 04 May 2026 13:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 04 May 2026 09:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Mediatek, Inc. Mediatek, Inc. mediatek Chipset
Vendors & Products		Mediatek, Inc. Mediatek, Inc. mediatek Chipset

Mon, 04 May 2026 07:45:00 +0000

Type	Values Removed	Values Added
Title		Modem Crash Leading to Remote Denial of Service on MediaTek Chipsets

Mon, 04 May 2026 06:45:00 +0000

Type	Values Removed	Values Added
Description		In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100.
Weaknesses		CWE-617
References		https://corp.mediatek.com/product-security-bulletin/May-2026

MITRE

Status: PUBLISHED

Assigner: MediaTek

Published: 2026-05-04T05:41:56.258Z

Updated: 2026-05-04T12:59:48.327Z

Reserved: 2025-11-03T01:30:59.013Z

Link: CVE-2026-20450

Vulnrichment

Updated: 2026-05-04T12:59:34.794Z

NVD

Status : Received

Published: 2026-05-04T07:15:59.723

Modified: 2026-05-04T14:16:32.553

Link: CVE-2026-20450

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20450", "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "state": "PUBLISHED", "assignerShortName": "MediaTek", "dateReserved": "2025-11-03T01:30:59.013Z", "datePublished": "2026-05-04T05:41:56.258Z", "dateUpdated": "2026-05-04T12:59:48.327Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "shortName": "MediaTek", "dateUpdated": "2026-05-04T05:41:56.258Z"}, "descriptions": [{"lang": "en", "value": "In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100."}], "affected": [{"vendor": "MediaTek, Inc.", "product": "MediaTek chipset", "defaultStatus": "unaffected", "versions": [{"version": "MT2735", "status": "affected"}, {"version": "MT2737", "status": "affected"}, {"version": "MT6833", "status": "affected"}, {"version": "MT6835", "status": "affected"}, {"version": "MT6853", "status": "affected"}, {"version": "MT6855", "status": "affected"}, {"version": "MT6858", "status": "affected"}, {"version": "MT6873", "status": "affected"}, {"version": "MT6875", "status": "affected"}, {"version": "MT6877", "status": "affected"}, {"version": "MT6878", "status": "affected"}, {"version": "MT6879", "status": "affected"}, {"version": "MT6880", "status": "affected"}, {"version": "MT6883", "status": "affected"}, {"version": "MT6885", "status": "affected"}, {"version": "MT6886", "status": "affected"}, {"version": "MT6889", "status": "affected"}, {"version": "MT6890", "status": "affected"}, {"version": "MT6891", "status": "affected"}, {"version": "MT6893", "status": "affected"}, {"version": "MT6895", "status": "affected"}, {"version": "MT6896", "status": "affected"}, {"version": "MT6897", "status": "affected"}, {"version": "MT6899", "status": "affected"}, {"version": "MT6980", "status": "affected"}, {"version": "MT6983", "status": "affected"}, {"version": "MT6985", "status": "affected"}, {"version": "MT6986", "status": "affected"}, {"version": "MT6989", "status": "affected"}, {"version": "MT6990", "status": "affected"}, {"version": "MT6991", "status": "affected"}, {"version": "MT6993", "status": "affected"}, {"version": "MT8668", "status": "affected"}, {"version": "MT8673", "status": "affected"}, {"version": "MT8675", "status": "affected"}, {"version": "MT8676", "status": "affected"}, {"version": "MT8678", "status": "affected"}, {"version": "MT8755", "status": "affected"}, {"version": "MT8771", "status": "affected"}, {"version": "MT8775", "status": "affected"}, {"version": "MT8791", "status": "affected"}, {"version": "MT8791T", "status": "affected"}, {"version": "MT8792", "status": "affected"}, {"version": "MT8793", "status": "affected"}, {"version": "MT8795T", "status": "affected"}, {"version": "MT8797", "status": "affected"}, {"version": "MT8798", "status": "affected"}, {"version": "MT8863", "status": "affected"}, {"version": "MT8873", "status": "affected"}, {"version": "MT8883", "status": "affected"}, {"version": "MT8893", "status": "affected"}]}], "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/May-2026"}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "cweId": "CWE-617", "description": "CWE-617 Reachable Assertion"}]}], "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-05-04T12:59:45.594477Z", "id": "CVE-2026-20450", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-04T12:59:48.327Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20450", "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "state": "PUBLISHED", "assignerShortName": "MediaTek", "dateReserved": "2025-11-03T01:30:59.013Z", "datePublished": "2026-05-04T05:41:56.258Z", "dateUpdated": "2026-05-04T12:59:48.327Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "shortName": "MediaTek", "dateUpdated": "2026-05-04T05:41:56.258Z"}, "descriptions": [{"lang": "en", "value": "In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01753620; Issue ID: MSV-6100."}], "affected": [{"vendor": "MediaTek, Inc.", "product": "MediaTek chipset", "defaultStatus": "unaffected", "versions": [{"version": "MT2735", "status": "affected"}, {"version": "MT2737", "status": "affected"}, {"version": "MT6833", "status": "affected"}, {"version": "MT6835", "status": "affected"}, {"version": "MT6853", "status": "affected"}, {"version": "MT6855", "status": "affected"}, {"version": "MT6858", "status": "affected"}, {"version": "MT6873", "status": "affected"}, {"version": "MT6875", "status": "affected"}, {"version": "MT6877", "status": "affected"}, {"version": "MT6878", "status": "affected"}, {"version": "MT6879", "status": "affected"}, {"version": "MT6880", "status": "affected"}, {"version": "MT6883", "status": "affected"}, {"version": "MT6885", "status": "affected"}, {"version": "MT6886", "status": "affected"}, {"version": "MT6889", "status": "affected"}, {"version": "MT6890", "status": "affected"}, {"version": "MT6891", "status": "affected"}, {"version": "MT6893", "status": "affected"}, {"version": "MT6895", "status": "affected"}, {"version": "MT6896", "status": "affected"}, {"version": "MT6897", "status": "affected"}, {"version": "MT6899", "status": "affected"}, {"version": "MT6980", "status": "affected"}, {"version": "MT6983", "status": "affected"}, {"version": "MT6985", "status": "affected"}, {"version": "MT6986", "status": "affected"}, {"version": "MT6989", "status": "affected"}, {"version": "MT6990", "status": "affected"}, {"version": "MT6991", "status": "affected"}, {"version": "MT6993", "status": "affected"}, {"version": "MT8668", "status": "affected"}, {"version": "MT8673", "status": "affected"}, {"version": "MT8675", "status": "affected"}, {"version": "MT8676", "status": "affected"}, {"version": "MT8678", "status": "affected"}, {"version": "MT8755", "status": "affected"}, {"version": "MT8771", "status": "affected"}, {"version": "MT8775", "status": "affected"}, {"version": "MT8791", "status": "affected"}, {"version": "MT8791T", "status": "affected"}, {"version": "MT8792", "status": "affected"}, {"version": "MT8793", "status": "affected"}, {"version": "MT8795T", "status": "affected"}, {"version": "MT8797", "status": "affected"}, {"version": "MT8798", "status": "affected"}, {"version": "MT8863", "status": "affected"}, {"version": "MT8873", "status": "affected"}, {"version": "MT8883", "status": "affected"}, {"version": "MT8893", "status": "affected"}]}], "references": [{"url": "https://corp.mediatek.com/product-security-bulletin/May-2026"}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "cweId": "CWE-617", "description": "CWE-617 Reachable Assertion"}]}], "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-20450", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-04T12:59:45.594477Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-04T12:59:34.794Z"}}]}}