Review reviewHigh

CVE-2026-20432

MediaTek, Inc. MediaTek chipset, mt2735 firmware, mt2735

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01406170; Issue ID: MSV-4461.

CVSS: 8
EPSS: 0.29%
CISA KEV: Not listed
Published: 2026.04.07

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.29%

Technical severityCVSS 8

Vulnerability overview

Affected product and versions

Product: MediaTek, Inc. MediaTek chipset, mt2735 firmware, mt2735
Affected versions: >= MT2735, >= MT2737, >= MT6779, >= MT6781, >= MT6783, >= MT6785, >= MT6789, >= MT6813, >= MT6815, >= MT6833, >= MT6835, >= MT6853, >= MT6855, >= MT6873, >= MT6875, >= MT6877, >= MT6878, >= MT6879, >= MT6880, >= MT6883
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that MediaTek, Inc. MediaTek chipset, mt2735 firmware, mt2735 and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE: CWE-787