Yüksek CVSS 7.5
CVE-2026-20520: Mt2716 Firmware: sınır dışı yazma
Açıklama (NVD)
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778988; Issue ID: MSV-8897.
Özet bilgiler
- Ürün
- Mediatek Mt2716 Firmware
- CVSS v3.1
- 7.5
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,23 (yüzdelik 14)
- CWE
- CWE-787
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| mediatek-mt2716-firmware | — | — | — |
| mediatek-mt2735-firmware | — | — | — |
| mediatek-mt2737-firmware | — | — | — |
| mediatek-mt6813-firmware | — | — | — |
| mediatek-mt6815-firmware | — | — | — |
| mediatek-mt6833-firmware | — | — | — |
| mediatek-mt6835-firmware | — | — | — |
| mediatek-mt6853-firmware | — | — | — |
| mediatek-mt6855-firmware | — | — | — |
| mediatek-mt6858-firmware | — | — | — |
| mediatek-mt6873-firmware | — | — | — |
| mediatek-mt6875-firmware | — | — | — |
| mediatek-mt6877-firmware | — | — | — |
| mediatek-mt6878-firmware | — | — | — |
| mediatek-mt6879-firmware | — | — | — |
| mediatek-mt6880-firmware | — | — | — |
| mediatek-mt6881-firmware | — | — | — |
| mediatek-mt6883-firmware | — | — | — |
| mediatek-mt6885-firmware | — | — | — |
| mediatek-mt6886-firmware | — | — | — |
| mediatek-mt6889-firmware | — | — | — |
| mediatek-mt6890-firmware | — | — | — |
| mediatek-mt6891-firmware | — | — | — |
| mediatek-mt6893-firmware | — | — | — |
| mediatek-mt6895-firmware | — | — | — |
| mediatek-mt6896-firmware | — | — | — |
| mediatek-mt6897-firmware | — | — | — |
| mediatek-mt6899-firmware | — | — | — |
| mediatek-mt6980-firmware | — | — | — |
| mediatek-mt6982-firmware | — | — | — |