CVE-2026-20565

HighCVSS 8.4/10Last modified Nov 3, 2026

Description

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778991; Issue ID: MSV-8900.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
MediaTek, Inc.MediaTek chipsetMT2716; MT2735; MT2737; MT6739; MT6761; MT6762; MT6763; MT6765; MT6767; MT6768; MT6769; MT6771; MT6779; MT6781; MT6783; MT6785; MT6789; MT6813; MT6815; MT6833

References

Timeline

Published
Nov 2, 2026
Last modified
Nov 3, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-205664.8In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has coCVE-2026-205676.7In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicioCVE-2026-205686.7In afe, there is a possible system crash due to use after free. This could lead to local escalation of privilege if a malicious actor has alCVE-2026-205696.7In adsp, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor CVE-2026-20579.8A vulnerability was detected in SourceCodester Medical Center Portal Management System 1.0. This affects an unknown function of the file /loCVE-2026-205706.7In adsp, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious CVE-2026-205716.7In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor hCVE-2026-205726.7In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a maliciousCVE-2026-205736.7In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has CVE-2026-205746.7In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor hCVE-2026-205756.7In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor hCVE-2026-205766.7In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicio
CVE-2026-20565: High severity, CVSS 8.4 | Vulnix