CVE-2026-20578

Published Nov 2, 2026 CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Description
In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01879164; Issue ID: MSV-9846.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Mediatek mt2716
Mediatek mt2716 Firmware
Mediatek mt6835
Mediatek mt6835 Firmware
Mediatek mt6858
Mediatek mt6858 Firmware
Mediatek mt6878
Mediatek mt6878 Firmware
Mediatek mt6881
Mediatek mt6881 Firmware
Mediatek mt6897
Mediatek mt6897 Firmware
Mediatek mt6899
Mediatek mt6899 Firmware
Mediatek mt6982
Mediatek mt6982 Firmware
Mediatek mt6986
Mediatek mt6986 Firmware
Mediatek mt6988
Mediatek mt6988 Firmware
Mediatek mt6991
Mediatek mt6991 Firmware
Mediatek mt6993
Mediatek mt6993 Firmware
Mediatek mt8668
Mediatek mt8668 Firmware
Mediatek mt8676
Mediatek mt8676 Firmware
Mediatek mt8678
Mediatek mt8678 Firmware
Mediatek mt8755
Mediatek mt8755 Firmware
Mediatek mt8775
Mediatek mt8775 Firmware
Mediatek mt8792
Mediatek mt8792 Firmware
Mediatek mt8793
Mediatek mt8793 Firmware
Mediatek mt8863
Mediatek mt8863 Firmware
Mediatek mt8873
Mediatek mt8873 Firmware
Mediatek mt8875
Mediatek mt8875 Firmware
Mediatek mt8883
Mediatek mt8883 Firmware
CPEs cpe:2.3:h:mediatek:mt2716:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6858:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6881:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6982:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6986:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6988:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8668:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8875:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt2716_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6858_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6878_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6881_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6897_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6899_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6982_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6986_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6988_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6991_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6993_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8668_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8676_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8678_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8755_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8775_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8792_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8793_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8863_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8873_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8875_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8883_firmware:-:*:*:*:*:*:*:*
Vendors & Products Mediatek mt2716
Mediatek mt2716 Firmware
Mediatek mt6835
Mediatek mt6835 Firmware
Mediatek mt6858
Mediatek mt6858 Firmware
Mediatek mt6878
Mediatek mt6878 Firmware
Mediatek mt6881
Mediatek mt6881 Firmware
Mediatek mt6897
Mediatek mt6897 Firmware
Mediatek mt6899
Mediatek mt6899 Firmware
Mediatek mt6982
Mediatek mt6982 Firmware
Mediatek mt6986
Mediatek mt6986 Firmware
Mediatek mt6988
Mediatek mt6988 Firmware
Mediatek mt6991
Mediatek mt6991 Firmware
Mediatek mt6993
Mediatek mt6993 Firmware
Mediatek mt8668
Mediatek mt8668 Firmware
Mediatek mt8676
Mediatek mt8676 Firmware
Mediatek mt8678
Mediatek mt8678 Firmware
Mediatek mt8755
Mediatek mt8755 Firmware
Mediatek mt8775
Mediatek mt8775 Firmware
Mediatek mt8792
Mediatek mt8792 Firmware
Mediatek mt8793
Mediatek mt8793 Firmware
Mediatek mt8863
Mediatek mt8863 Firmware
Mediatek mt8873
Mediatek mt8873 Firmware
Mediatek mt8875
Mediatek mt8875 Firmware
Mediatek mt8883
Mediatek mt8883 Firmware
Type Values Removed Values Added
Title Side Channel Information Disclosure in MediaTek Modem Leading to Remote Denial of Service
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Mediatek
Mediatek mediatek Chipset
Mediatek, Inc.
Mediatek, Inc. mediatek Chipset
Vendors & Products Mediatek
Mediatek mediatek Chipset
Mediatek, Inc.
Mediatek, Inc. mediatek Chipset
Type Values Removed Values Added
Title Side Channel Information Disclosure in MediaTek Modem Leading to Remote Denial of Service
Type Values Removed Values Added
Description In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01879164; Issue ID: MSV-9846.
Weaknesses CWE-757
References
Weaknesses

Sources

Status
PUBLISHED
Assigner
MediaTek
Published
Updated
Nov 2, 2026, 3:00 PM
Reserved
Nov 3, 2025, 1:30 AM
Status
Analyzed
Published
Nov 2, 2026, 3:17 AM
Modified
Nov 12, 2026, 4:47 PM