CVE-2026-20457
Published Jul 1, 2026
CVSS 3.1 · 5.3 Medium
EPSS < 1%
KEV · Not listed
Description
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01826924; Issue ID: MSV-7301.
Affected Products
-
CVE record
-
NVD configurations
No data
-
Red Hat packages
No data
-
OpenCVE enrichment
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| MediaTek, Inc. | MediaTek chipset | unaffected |
|
No data.
No data.
| Vendor | Product | Versions | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Mediatek, Inc. | Mediatek Chipset |
|
Remediation
Tracking
Advisories
Metrics
No CVSS v4.0
Attack Vector Adjacent Network
Attack Complexity High
Privileges Required None
Scope Unchanged
Confidentiality Impact None
Integrity Impact None
Availability Impact High
User Interaction None
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.286% probability within 30 days)
Exploitation none
Automatable no
Technical Impact partial
References
History
Aug 2, 2026 12:15 AM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem Input Validation Flaw Enables Remote Denial of Service |
Jul 25, 2026 10:45 PM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem Input Validation Flaw Enables Remote Denial of Service |
Jul 15, 2026 11:15 PM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem Crash due to Improper Input Validation Can Cause Remote Denial of Service |
Jul 14, 2026 7:45 PM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem Crash due to Improper Input Validation Can Cause Remote Denial of Service |
Jul 13, 2026 4:00 PM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem Firmware Crash Leads to Remote Denial of Service via Rogue Base Station |
Jul 12, 2026 10:15 AM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem Firmware Crash Leads to Remote Denial of Service via Rogue Base Station |
Jul 11, 2026 2:15 AM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Remote Denial of Service via Modem Input Validation Error on MediaTek Chipsets |
Jul 9, 2026 9:00 PM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Remote Denial of Service via Modem Input Validation Error on MediaTek Chipsets |
Jul 9, 2026 7:15 AM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem Input Validation Crash Leading to Remote Denial of Service |
Jul 8, 2026 7:15 PM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem Input Validation Crash Leading to Remote Denial of Service |
Jul 8, 2026 3:00 AM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | MediaTek Modem Firmware Crash Allowing Remote Denial of Service |
Jul 7, 2026 9:45 AM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | MediaTek Modem Firmware Crash Allowing Remote Denial of Service |
Jul 6, 2026 3:45 PM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Improper Modem Input Validation Allows Remote Denial of Service |
Jul 5, 2026 10:30 PM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Improper Modem Input Validation Allows Remote Denial of Service |
Jul 5, 2026 11:15 AM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem Crash Due to Improper Input Validation on MediaTek Chipsets Enables Remote DoS |
Jul 4, 2026 10:45 PM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem Crash Due to Improper Input Validation on MediaTek Chipsets Enables Remote DoS |
Jul 4, 2026 2:45 PM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem Crash Vulnerability Causes Remote Denial of Service via Rogue Base Station |
Jul 4, 2026 3:45 AM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem Crash Vulnerability Causes Remote Denial of Service via Rogue Base Station |
Jul 3, 2026 7:30 PM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem Firmware Crash via Improper Input Validation Leading to Remote Denial of Service |
Jul 3, 2026 12:00 PM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem Firmware Crash via Improper Input Validation Leading to Remote Denial of Service |
Jul 2, 2026 7:30 PM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Null Pointer Dereference in MediaTek Modem Firmware Enables Remote Denial of Service |
Jul 2, 2026 11:00 AM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Null Pointer Dereference in MediaTek Modem Firmware Enables Remote Denial of Service |
Jul 2, 2026 6:15 AM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem Crash Enabling Remote Denial of Service via Improper Input Validation |
Jul 2, 2026 12:00 AM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem Crash Enabling Remote Denial of Service via Improper Input Validation |
Jul 1, 2026 3:30 PM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem firmware crash due to improper input validation leading to remote denial of service |
Jul 1, 2026 1:45 PM
First appearance in the feed. Affected vendors updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Mediatek, Inc.
Mediatek, Inc. mediatek Chipset |
|
| Vendors & Products |
Mediatek, Inc.
Mediatek, Inc. mediatek Chipset |
Jul 1, 2026 11:30 AM
Scoring metrics updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Jul 1, 2026 9:15 AM
Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Modem firmware crash due to improper input validation leading to remote denial of service |
Jul 1, 2026 3:30 AM
Description updated. Weaknesses updated. Added references
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01826924; Issue ID: MSV-7301. | |
| Weaknesses | CWE-476 | |
| References |
|
Subscriptions
Weaknesses
