CVE-2026-20520: CWE-787 Out-of-bounds Write in MediaTek, Inc. MediaTek chipset
Description
CVE-2026-20520 is an out-of-bounds write vulnerability in MediaTek chipsets' modem component caused by a missing bounds check. This flaw allows remote escalation of privilege if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation does not require user interaction or additional execution privileges. Multiple MediaTek chipset models are affected.
Affected software
MediaTek, Inc.
MediaTek chipset
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves an out-of-bounds write in the modem of MediaTek chipsets due to a missing bounds check. An attacker controlling a rogue base station can exploit this flaw remotely to escalate privileges on the affected device without needing user interaction or extra execution privileges. The issue is identified by Patch ID MOLY01778988 and Issue ID MSV-8897. The affected chipsets include a wide range of MediaTek models such as MT2716, MT2735, MT6813, MT6899, MT6980, MT8798, MT8893, among others.
Potential Impact
Successful exploitation can lead to remote escalation of privilege on the affected device. This means an attacker controlling a rogue base station can gain higher privileges on the device without user involvement or additional execution rights, potentially compromising device security.
Mitigation Recommendations
A patch identified as MOLY01778988 addresses this vulnerability. Users and vendors should apply this official fix to affected MediaTek chipsets. Since this is not a cloud service, remediation depends on deploying the patch to the affected hardware. No additional mitigation steps are specified.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- MediaTek
- Date Reserved
- 2025-11-03T01:30:59.032Z
- State
- PUBLISHED
Threat ID: 6ac309122cdf04f656a0bf90
Added to database: 10/05/2026, 02:18:58 UTC
Last enriched: 10/05/2026, 02:48:29 UTC
Last updated: 10/05/2026, 02:48:29 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.