CVE-2026-20449

Medium

Description

In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01760138; Issue ID: MSV-6148.

SeverityMedium
CVSS6.5
Exploit probability—
ProductMediatek Mt6763 Firmware
PublishedMay 4, 2026
First seenMay 4, 2026
Weakness typeCWE-120CWE-120

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
mediatek mt6763_firmwareNo range specified—
mediatek mt6765_firmwareNo range specified—
mediatek mt6767_firmwareNo range specified—
mediatek mt6768_firmwareNo range specified—
mediatek mt6769_firmwareNo range specified—
mediatek mt6771_firmwareNo range specified—
mediatek mt6779_firmwareNo range specified—
mediatek mt6781_firmwareNo range specified—
mediatek mt6783_firmwareNo range specified—
mediatek mt6785_firmwareNo range specified—
mediatek mt6789_firmwareNo range specified—
mediatek mt6813_firmwareNo range specified—
mediatek mt6815_firmwareNo range specified—
mediatek mt6833_firmwareNo range specified—
mediatek mt6835_firmwareNo range specified—
mediatek mt6853_firmwareNo range specified—
mediatek mt6855_firmwareNo range specified—
mediatek mt6858_firmwareNo range specified—
mediatek mt6873_firmwareNo range specified—
mediatek mt6875_firmwareNo range specified—
mediatek mt6877_firmwareNo range specified—
mediatek mt6878_firmwareNo range specified—
mediatek mt6879_firmwareNo range specified—
mediatek mt6880_firmwareNo range specified—
mediatek mt6883_firmwareNo range specified—
mediatek mt6885_firmwareNo range specified—
mediatek mt6886_firmwareNo range specified—
mediatek mt6889_firmwareNo range specified—
mediatek mt6890_firmwareNo range specified—
mediatek mt6891_firmwareNo range specified—
mediatek mt6893_firmwareNo range specified—
mediatek mt6895_firmwareNo range specified—
mediatek mt6896_firmwareNo range specified—
mediatek mt6897_firmwareNo range specified—
mediatek mt6899_firmwareNo range specified—
mediatek mt6980_firmwareNo range specified—
mediatek mt6983_firmwareNo range specified—
mediatek mt6985_firmwareNo range specified—
mediatek mt6986d_firmwareNo range specified—
mediatek mt6988_firmwareNo range specified—
mediatek mt2735_firmwareNo range specified—
mediatek mt2737_firmwareNo range specified—
mediatek mt6739_firmwareNo range specified—
mediatek mt6761_firmwareNo range specified—
mediatek mt6762_firmwareNo range specified—
mediatek mt6989_firmwareNo range specified—
mediatek mt6990_firmwareNo range specified—
mediatek mt6991_firmwareNo range specified—
mediatek mt6993_firmwareNo range specified—
mediatek mt8668_firmwareNo range specified—
mediatek mt8673_firmwareNo range specified—
mediatek mt8675_firmwareNo range specified—
mediatek mt8676_firmwareNo range specified—
mediatek mt8678_firmwareNo range specified—
mediatek mt8755_firmwareNo range specified—
mediatek mt8771_firmwareNo range specified—
mediatek mt8775_firmwareNo range specified—
mediatek mt8791_firmwareNo range specified—
mediatek mt8791t_firmwareNo range specified—
mediatek mt8792_firmwareNo range specified—
mediatek mt8793_firmwareNo range specified—
mediatek mt8795t_firmwareNo range specified—
mediatek mt8797_firmwareNo range specified—
mediatek mt8798_firmwareNo range specified—
mediatek mt8863_firmwareNo range specified—
mediatek mt8873_firmwareNo range specified—
mediatek mt8883_firmwareNo range specified—
mediatek mt8893_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.