Yüksek CVSS 8.8
CVE-2026-20433: Mt2735 Firmware: sınır dışı yazma
Açıklama (NVD)
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460.
Özet bilgiler
- Ürün
- Mediatek Mt2735 Firmware
- CVSS v3.1
- 8.8
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,31 (yüzdelik 24)
- CWE
- CWE-787
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| mediatek-mt2735-firmware | — | — | — |
| mediatek-mt2737-firmware | — | — | — |
| mediatek-mt6813-firmware | — | — | — |
| mediatek-mt6833-firmware | — | — | — |
| mediatek-mt6833p-firmware | — | — | — |
| mediatek-mt6835-firmware | — | — | — |
| mediatek-mt6835t-firmware | — | — | — |
| mediatek-mt6853-firmware | — | — | — |
| mediatek-mt6853t-firmware | — | — | — |
| mediatek-mt6855-firmware | — | — | — |
| mediatek-mt6855t-firmware | — | — | — |
| mediatek-mt6873-firmware | — | — | — |
| mediatek-mt6875-firmware | — | — | — |
| mediatek-mt6875t-firmware | — | — | — |
| mediatek-mt6877-firmware | — | — | — |
| mediatek-mt6877t-firmware | — | — | — |
| mediatek-mt6877tt-firmware | — | — | — |
| mediatek-mt6878-firmware | — | — | — |
| mediatek-mt6878m-firmware | — | — | — |
| mediatek-mt6879-firmware | — | — | — |
| mediatek-mt6880-firmware | — | — | — |
| mediatek-mt6883-firmware | — | — | — |
| mediatek-mt6885-firmware | — | — | — |
| mediatek-mt6886-firmware | — | — | — |
| mediatek-mt6889-firmware | — | — | — |
| mediatek-mt6890-firmware | — | — | — |
| mediatek-mt6891-firmware | — | — | — |
| mediatek-mt6893-firmware | — | — | — |
| mediatek-mt6895-firmware | — | — | — |
| mediatek-mt6895tt-firmware | — | — | — |