Vulnerability-Lookup

CVE-2026-20406 (GCVE-0-2026-20406)

Vulnerability from cvelistv5 – Published: 2026-02-02 08:14 – Updated: 2026-03-30 13:02

Summary

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01726634; Issue ID: MSV-5728.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-02-17 14:13 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

MediaTek mitre root

References

1 reference

URL	Tags
https://corp.mediatek.com/product-security-bullet…

Impacted products

1 product

Vendor	Product	Version	CPE status
MediaTek, Inc.	MediaTek chipset	Affected: MT2735 Affected: MT2737 Affected: MT6813 Affected: MT6815 Affected: MT6833 Affected: MT6835 Affected: MT6853 Affected: MT6855 Affected: MT6858 Affected: MT6873 Affected: MT6875 Affected: MT6877 Affected: MT6878 Affected: MT6879 Affected: MT6880 Affected: MT6883 Affected: MT6885 Affected: MT6886 Affected: MT6889 Affected: MT6890 Affected: MT6891 Affected: MT6893 Affected: MT6895 Affected: MT6896 Affected: MT6897 Affected: MT6899 Affected: MT6980 Affected: MT6983 Affected: MT6985 Affected: MT6986 Affected: MT6989 Affected: MT6990 Affected: MT6991 Affected: MT6993 Affected: MT8668 Affected: MT8673 Affected: MT8675 Affected: MT8676 Affected: MT8678 Affected: MT8755 Affected: MT8771 Affected: MT8791 Affected: MT8791T Affected: MT8792 Affected: MT8793 Affected: MT8795T Affected: MT8797 Affected: MT8798 Affected: MT8863 Affected: MT8873 Affected: MT8883 Affected: MT8893	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "ADJACENT_NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-20406",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-17T14:13:31.407121Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-17T14:13:54.700Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MediaTek chipset",
          "vendor": "MediaTek, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "MT2735"
            },
            {
              "status": "affected",
              "version": "MT2737"
            },
            {
              "status": "affected",
              "version": "MT6813"
            },
            {
              "status": "affected",
              "version": "MT6815"
            },
            {
              "status": "affected",
              "version": "MT6833"
            },
            {
              "status": "affected",
              "version": "MT6835"
            },
            {
              "status": "affected",
              "version": "MT6853"
            },
            {
              "status": "affected",
              "version": "MT6855"
            },
            {
              "status": "affected",
              "version": "MT6858"
            },
            {
              "status": "affected",
              "version": "MT6873"
            },
            {
              "status": "affected",
              "version": "MT6875"
            },
            {
              "status": "affected",
              "version": "MT6877"
            },
            {
              "status": "affected",
              "version": "MT6878"
            },
            {
              "status": "affected",
              "version": "MT6879"
            },
            {
              "status": "affected",
              "version": "MT6880"
            },
            {
              "status": "affected",
              "version": "MT6883"
            },
            {
              "status": "affected",
              "version": "MT6885"
            },
            {
              "status": "affected",
              "version": "MT6886"
            },
            {
              "status": "affected",
              "version": "MT6889"
            },
            {
              "status": "affected",
              "version": "MT6890"
            },
            {
              "status": "affected",
              "version": "MT6891"
            },
            {
              "status": "affected",
              "version": "MT6893"
            },
            {
              "status": "affected",
              "version": "MT6895"
            },
            {
              "status": "affected",
              "version": "MT6896"
            },
            {
              "status": "affected",
              "version": "MT6897"
            },
            {
              "status": "affected",
              "version": "MT6899"
            },
            {
              "status": "affected",
              "version": "MT6980"
            },
            {
              "status": "affected",
              "version": "MT6983"
            },
            {
              "status": "affected",
              "version": "MT6985"
            },
            {
              "status": "affected",
              "version": "MT6986"
            },
            {
              "status": "affected",
              "version": "MT6989"
            },
            {
              "status": "affected",
              "version": "MT6990"
            },
            {
              "status": "affected",
              "version": "MT6991"
            },
            {
              "status": "affected",
              "version": "MT6993"
            },
            {
              "status": "affected",
              "version": "MT8668"
            },
            {
              "status": "affected",
              "version": "MT8673"
            },
            {
              "status": "affected",
              "version": "MT8675"
            },
            {
              "status": "affected",
              "version": "MT8676"
            },
            {
              "status": "affected",
              "version": "MT8678"
            },
            {
              "status": "affected",
              "version": "MT8755"
            },
            {
              "status": "affected",
              "version": "MT8771"
            },
            {
              "status": "affected",
              "version": "MT8791"
            },
            {
              "status": "affected",
              "version": "MT8791T"
            },
            {
              "status": "affected",
              "version": "MT8792"
            },
            {
              "status": "affected",
              "version": "MT8793"
            },
            {
              "status": "affected",
              "version": "MT8795T"
            },
            {
              "status": "affected",
              "version": "MT8797"
            },
            {
              "status": "affected",
              "version": "MT8798"
            },
            {
              "status": "affected",
              "version": "MT8863"
            },
            {
              "status": "affected",
              "version": "MT8873"
            },
            {
              "status": "affected",
              "version": "MT8883"
            },
            {
              "status": "affected",
              "version": "MT8893"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01726634; Issue ID: MSV-5728."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-30T13:02:51.973Z",
        "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "shortName": "MediaTek"
      },
      "references": [
        {
          "url": "https://corp.mediatek.com/product-security-bulletin/February-2026"
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
    "assignerShortName": "MediaTek",
    "cveId": "CVE-2026-20406",
    "datePublished": "2026-02-02T08:14:52.889Z",
    "dateReserved": "2025-11-03T01:30:59.007Z",
    "dateUpdated": "2026-03-30T13:02:51.973Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-20406",
      "date": "2026-09-13",
      "epss": "0.00223",
      "percentile": "0.1299"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-20406\",\"sourceIdentifier\":\"security@mediatek.com\",\"published\":\"2026-02-02T09:15:55.370\",\"lastModified\":\"2026-06-17T10:17:22.170\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01726634; Issue ID: MSV-5728.\"},{\"lang\":\"es\",\"value\":\"En el m\u00f3dem, existe una posible ca\u00edda del sistema debido a una excepci\u00f3n no capturada. Esto podr\u00eda llevar a una denegaci\u00f3n de servicio remota, si un UE se ha conectado a una estaci\u00f3n base maliciosa controlada por el atacante, sin necesidad de privilegios de ejecuci\u00f3n adicionales. No se necesita interacci\u00f3n del usuario para la explotaci\u00f3n. ID del parche: MOLY01726634; ID del problema: MSV-5728.\"}],\"affected\":[{\"source\":\"security@mediatek.com\",\"affectedData\":[{\"vendor\":\"MediaTek, Inc.\",\"product\":\"MediaTek chipset\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"MT2735\",\"status\":\"affected\"},{\"version\":\"MT2737\",\"status\":\"affected\"},{\"version\":\"MT6813\",\"status\":\"affected\"},{\"version\":\"MT6815\",\"status\":\"affected\"},{\"version\":\"MT6833\",\"status\":\"affected\"},{\"version\":\"MT6835\",\"status\":\"affected\"},{\"version\":\"MT6853\",\"status\":\"affected\"},{\"version\":\"MT6855\",\"status\":\"affected\"},{\"version\":\"MT6858\",\"status\":\"affected\"},{\"version\":\"MT6873\",\"status\":\"affected\"},{\"version\":\"MT6875\",\"status\":\"affected\"},{\"version\":\"MT6877\",\"status\":\"affected\"},{\"version\":\"MT6878\",\"status\":\"affected\"},{\"version\":\"MT6879\",\"status\":\"affected\"},{\"version\":\"MT6880\",\"status\":\"affected\"},{\"version\":\"MT6883\",\"status\":\"affected\"},{\"version\":\"MT6885\",\"status\":\"affected\"},{\"version\":\"MT6886\",\"status\":\"affected\"},{\"version\":\"MT6889\",\"status\":\"affected\"},{\"version\":\"MT6890\",\"status\":\"affected\"},{\"version\":\"MT6891\",\"status\":\"affected\"},{\"version\":\"MT6893\",\"status\":\"affected\"},{\"version\":\"MT6895\",\"status\":\"affected\"},{\"version\":\"MT6896\",\"status\":\"affected\"},{\"version\":\"MT6897\",\"status\":\"affected\"},{\"version\":\"MT6899\",\"status\":\"affected\"},{\"version\":\"MT6980\",\"status\":\"affected\"},{\"version\":\"MT6983\",\"status\":\"affected\"},{\"version\":\"MT6985\",\"status\":\"affected\"},{\"version\":\"MT6986\",\"status\":\"affected\"},{\"version\":\"MT6989\",\"status\":\"affected\"},{\"version\":\"MT6990\",\"status\":\"affected\"},{\"version\":\"MT6991\",\"status\":\"affected\"},{\"version\":\"MT6993\",\"status\":\"affected\"},{\"version\":\"MT8668\",\"status\":\"affected\"},{\"version\":\"MT8673\",\"status\":\"affected\"},{\"version\":\"MT8675\",\"status\":\"affected\"},{\"version\":\"MT8676\",\"status\":\"affected\"},{\"version\":\"MT8678\",\"status\":\"affected\"},{\"version\":\"MT8755\",\"status\":\"affected\"},{\"version\":\"MT8771\",\"status\":\"affected\"},{\"version\":\"MT8791\",\"status\":\"affected\"},{\"version\":\"MT8791T\",\"status\":\"affected\"},{\"version\":\"MT8792\",\"status\":\"affected\"},{\"version\":\"MT8793\",\"status\":\"affected\"},{\"version\":\"MT8795T\",\"status\":\"affected\"},{\"version\":\"MT8797\",\"status\":\"affected\"},{\"version\":\"MT8798\",\"status\":\"affected\"},{\"version\":\"MT8863\",\"status\":\"affected\"},{\"version\":\"MT8873\",\"status\":\"affected\"},{\"version\":\"MT8883\",\"status\":\"affected\"},{\"version\":\"MT8893\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-02-17T14:13:31.407121Z\",\"id\":\"CVE-2026-20406\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security@mediatek.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-770\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-754\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mediatek:nr15:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E30A2D2E-6A72-4070-A471-EEE75F7D07F2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mediatek:nr16:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B763B71-F913-45B4-B91E-D7F0670C4315\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"66F8874B-DBF1-4A67-8ADF-4654AB56B6A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:mediatek:nr17r:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC63582A-F9A5-4450-A263-CE1FD4B4F3AC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F1D09FC-5BE9-4B23-82F1-3C6EAC5711A6\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C2A1118-B5F7-4EF5-B329-0887B5F3430E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"66F9EAE4-F1D7-46DB-AA2A-0290F6EF0501\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6815:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B7122918-8C44-4F24-82E4-B8448247FC83\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9814939B-F05E-4870-90C0-7C0F6BAAEB39\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"19A63103-C708-48EC-B44D-5E465A6B79C5\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"366F1912-756B-443E-9962-224937DD7DFB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6858:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C61AD730-66FE-4605-A89B-3B8D6526D612\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"855A8046-34ED-4891-ACE5-76AB10AC8D53\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"704BE5CE-AE08-4432-A8B0-4C8BD62148AD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"68CF4A7A-3136-4C4C-A795-81323896BE11\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15E2EC3F-9FB3-488B-B1C1-2793A416C755\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD64413C-C774-4C4F-9551-89E1AA9469EE\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF3E2B84-DAFE-4E11-B23B-026F719475F5\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B787DC3-8E5A-4968-B20B-37B6257FAAE2\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"171D1C08-F055-44C0-913C-AA2B73AF5B72\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D8E91CA4-CA5B-40D1-9A96-2B875104BCF4\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"213B5C7F-D965-4312-9CDF-4F06FA77D401\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E0CA45C9-7BFE-4C93-B2AF-B86501F763AB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33DEF766-EAF1-4E36-BB7C-43069B26507A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2A7D8055-F4B6-41EE-A078-11D56285AB66\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BA9131F6-F167-4FD7-8FBF-B372CBBCF46F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6986:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F419FE2-2D6D-48EE-9B6C-E88AC5D44186\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD7DE6B2-66D9-4A3E-B15F-D56505559255\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A76806D-A4E3-466A-90CB-E9FFE478E7A0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CBBB30DF-E963-4940-B742-F6801F68C3FC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"57E92BE0-5E65-4770-8E1A-0E5D07A38164\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8668:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2589C222-3D62-4BDB-98F2-5F1E38600D8D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"152F6606-FA23-4530-AA07-419866B74CB3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"03E6123A-7603-4EAB-AFFB-229E8A040709\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE302F6F-170E-4350-A8F4-65BE0C50CB78\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"152A5F3D-8004-4649-BDB1-E6F0798AF1CB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1CF88096-5CBD-4A4B-8F47-33D38985956F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D09F23D-D023-4A60-B426-61251FDD8A5A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9CD2C3EC-B62D-4616-964F-FDBE5B14A449\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1BB05B1D-77C9-4E42-91AD-9F087413DC20\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"336FC69E-E89F-4642-B6B9-8009D9A2BD52\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"78D4E9E1-B044-41EC-BE98-22DC0E5E9010\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B469BF4-5961-42E9-814B-1BE06D182E45\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"637CAAD2-DCC0-4F81-B781-5D0536844CA8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"77E0D738-F0B9-468F-8A10-204F498320BC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6DD525F-7050-42BD-829D-1121698B8009\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"23DD8281-FEB4-4E23-8DDA-680FF895F12E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:mediatek:mt8893:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CCFAADB1-C2B2-47A6-BB66-761B964E7DFB\"}]}]}],\"references\":[{\"url\":\"https://corp.mediatek.com/product-security-bulletin/February-2026\",\"source\":\"security@mediatek.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2026-02-03T09:18:31+00:00",
      "cve": "CVE-2026-20406",
      "id": "CVE-2026-20406",
      "initial_release_date": "2026-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2026-20406",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-20406.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 6.5, \"attackVector\": \"ADJACENT_NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-20406\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-02-17T14:13:31.407121Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-02-02T21:03:15.476Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"MediaTek, Inc.\", \"product\": \"MediaTek chipset\", \"versions\": [{\"status\": \"affected\", \"version\": \"MT2735\"}, {\"status\": \"affected\", \"version\": \"MT2737\"}, {\"status\": \"affected\", \"version\": \"MT6813\"}, {\"status\": \"affected\", \"version\": \"MT6815\"}, {\"status\": \"affected\", \"version\": \"MT6833\"}, {\"status\": \"affected\", \"version\": \"MT6835\"}, {\"status\": \"affected\", \"version\": \"MT6853\"}, {\"status\": \"affected\", \"version\": \"MT6855\"}, {\"status\": \"affected\", \"version\": \"MT6858\"}, {\"status\": \"affected\", \"version\": \"MT6873\"}, {\"status\": \"affected\", \"version\": \"MT6875\"}, {\"status\": \"affected\", \"version\": \"MT6877\"}, {\"status\": \"affected\", \"version\": \"MT6878\"}, {\"status\": \"affected\", \"version\": \"MT6879\"}, {\"status\": \"affected\", \"version\": \"MT6880\"}, {\"status\": \"affected\", \"version\": \"MT6883\"}, {\"status\": \"affected\", \"version\": \"MT6885\"}, {\"status\": \"affected\", \"version\": \"MT6886\"}, {\"status\": \"affected\", \"version\": \"MT6889\"}, {\"status\": \"affected\", \"version\": \"MT6890\"}, {\"status\": \"affected\", \"version\": \"MT6891\"}, {\"status\": \"affected\", \"version\": \"MT6893\"}, {\"status\": \"affected\", \"version\": \"MT6895\"}, {\"status\": \"affected\", \"version\": \"MT6896\"}, {\"status\": \"affected\", \"version\": \"MT6897\"}, {\"status\": \"affected\", \"version\": \"MT6899\"}, {\"status\": \"affected\", \"version\": \"MT6980\"}, {\"status\": \"affected\", \"version\": \"MT6983\"}, {\"status\": \"affected\", \"version\": \"MT6985\"}, {\"status\": \"affected\", \"version\": \"MT6986\"}, {\"status\": \"affected\", \"version\": \"MT6989\"}, {\"status\": \"affected\", \"version\": \"MT6990\"}, {\"status\": \"affected\", \"version\": \"MT6991\"}, {\"status\": \"affected\", \"version\": \"MT6993\"}, {\"status\": \"affected\", \"version\": \"MT8668\"}, {\"status\": \"affected\", \"version\": \"MT8673\"}, {\"status\": \"affected\", \"version\": \"MT8675\"}, {\"status\": \"affected\", \"version\": \"MT8676\"}, {\"status\": \"affected\", \"version\": \"MT8678\"}, {\"status\": \"affected\", \"version\": \"MT8755\"}, {\"status\": \"affected\", \"version\": \"MT8771\"}, {\"status\": \"affected\", \"version\": \"MT8791\"}, {\"status\": \"affected\", \"version\": \"MT8791T\"}, {\"status\": \"affected\", \"version\": \"MT8792\"}, {\"status\": \"affected\", \"version\": \"MT8793\"}, {\"status\": \"affected\", \"version\": \"MT8795T\"}, {\"status\": \"affected\", \"version\": \"MT8797\"}, {\"status\": \"affected\", \"version\": \"MT8798\"}, {\"status\": \"affected\", \"version\": \"MT8863\"}, {\"status\": \"affected\", \"version\": \"MT8873\"}, {\"status\": \"affected\", \"version\": \"MT8883\"}, {\"status\": \"affected\", \"version\": \"MT8893\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://corp.mediatek.com/product-security-bulletin/February-2026\"}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01726634; Issue ID: MSV-5728.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-770\", \"description\": \"CWE-770 Allocation of Resources Without Limits or Throttling\"}]}], \"providerMetadata\": {\"orgId\": \"ee979b05-11f8-4f25-a7e0-a1fa9c190374\", \"shortName\": \"MediaTek\", \"dateUpdated\": \"2026-03-30T13:02:51.973Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-20406\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-03-30T13:02:51.973Z\", \"dateReserved\": \"2025-11-03T01:30:59.007Z\", \"assignerOrgId\": \"ee979b05-11f8-4f25-a7e0-a1fa9c190374\", \"datePublished\": \"2026-02-02T08:14:52.889Z\", \"assignerShortName\": \"MediaTek\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-0231

Vulnerability from certfr_avis - Published: 2026-03-03 - Updated: 2026-03-03

De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.

Google indique que la vulnérabilité CVE-2026-21385 est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Google	Android	Android versions antérieures à 14, 15, 16, 16-qpr2 avant le correctif du 1 mars 2026

References

Title

Publication Time

Tags

Bulletin de sécurité Google Android

2026-03-02

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Android versions ant\u00e9rieures \u00e0 14, 15, 16, 16-qpr2 avant le correctif du 1 mars 2026",
      "product": {
        "name": "Android",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-61612",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61612"
    },
    {
      "name": "CVE-2026-0005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0005"
    },
    {
      "name": "CVE-2026-20403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20403"
    },
    {
      "name": "CVE-2025-58409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58409"
    },
    {
      "name": "CVE-2025-48644",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48644"
    },
    {
      "name": "CVE-2025-48544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48544"
    },
    {
      "name": "CVE-2026-20425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20425"
    },
    {
      "name": "CVE-2025-47398",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47398"
    },
    {
      "name": "CVE-2026-0015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0015"
    },
    {
      "name": "CVE-2026-20422",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20422"
    },
    {
      "name": "CVE-2025-64783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64783"
    },
    {
      "name": "CVE-2026-0026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0026"
    },
    {
      "name": "CVE-2026-0014",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0014"
    },
    {
      "name": "CVE-2026-20406",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20406"
    },
    {
      "name": "CVE-2025-48577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48577"
    },
    {
      "name": "CVE-2024-43766",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-43766"
    },
    {
      "name": "CVE-2025-58407",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58407"
    },
    {
      "name": "CVE-2026-21735",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21735"
    },
    {
      "name": "CVE-2026-0013",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0013"
    },
    {
      "name": "CVE-2025-47388",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47388"
    },
    {
      "name": "CVE-2025-61616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61616"
    },
    {
      "name": "CVE-2025-58411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58411"
    },
    {
      "name": "CVE-2025-47339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47339"
    },
    {
      "name": "CVE-2025-2879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-2879"
    },
    {
      "name": "CVE-2026-20426",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20426"
    },
    {
      "name": "CVE-2026-0030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0030"
    },
    {
      "name": "CVE-2025-48578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48578"
    },
    {
      "name": "CVE-2026-20428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20428"
    },
    {
      "name": "CVE-2025-48568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48568"
    },
    {
      "name": "CVE-2025-48641",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48641"
    },
    {
      "name": "CVE-2025-47366",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47366"
    },
    {
      "name": "CVE-2025-48650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48650"
    },
    {
      "name": "CVE-2026-0011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0011"
    },
    {
      "name": "CVE-2026-20420",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20420"
    },
    {
      "name": "CVE-2026-0023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0023"
    },
    {
      "name": "CVE-2026-20401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20401"
    },
    {
      "name": "CVE-2026-0017",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0017"
    },
    {
      "name": "CVE-2025-58408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58408"
    },
    {
      "name": "CVE-2025-47397",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47397"
    },
    {
      "name": "CVE-2025-13952",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-13952"
    },
    {
      "name": "CVE-2026-0031",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0031"
    },
    {
      "name": "CVE-2025-47395",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47395"
    },
    {
      "name": "CVE-2026-20404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20404"
    },
    {
      "name": "CVE-2026-0020",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0020"
    },
    {
      "name": "CVE-2025-48630",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48630"
    },
    {
      "name": "CVE-2025-48585",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48585"
    },
    {
      "name": "CVE-2025-48635",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48635"
    },
    {
      "name": "CVE-2025-48567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48567"
    },
    {
      "name": "CVE-2025-48574",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48574"
    },
    {
      "name": "CVE-2026-0035",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0035"
    },
    {
      "name": "CVE-2026-0024",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0024"
    },
    {
      "name": "CVE-2025-64893",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64893"
    },
    {
      "name": "CVE-2025-48634",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48634"
    },
    {
      "name": "CVE-2025-47396",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47396"
    },
    {
      "name": "CVE-2025-48653",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48653"
    },
    {
      "name": "CVE-2026-0032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0032"
    },
    {
      "name": "CVE-2026-20427",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20427"
    },
    {
      "name": "CVE-2025-38616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38616"
    },
    {
      "name": "CVE-2025-69279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69279"
    },
    {
      "name": "CVE-2026-20434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20434"
    },
    {
      "name": "CVE-2025-48642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48642"
    },
    {
      "name": "CVE-2026-0025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0025"
    },
    {
      "name": "CVE-2025-20761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20761"
    },
    {
      "name": "CVE-2025-10865",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-10865"
    },
    {
      "name": "CVE-2025-48587",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48587"
    },
    {
      "name": "CVE-2026-0038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0038"
    },
    {
      "name": "CVE-2025-48619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48619"
    },
    {
      "name": "CVE-2025-47378",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47378"
    },
    {
      "name": "CVE-2025-48613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48613"
    },
    {
      "name": "CVE-2025-47402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47402"
    },
    {
      "name": "CVE-2025-47346",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47346"
    },
    {
      "name": "CVE-2026-0006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0006"
    },
    {
      "name": "CVE-2025-40266",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40266"
    },
    {
      "name": "CVE-2025-69278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-69278"
    },
    {
      "name": "CVE-2026-20421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20421"
    },
    {
      "name": "CVE-2025-48646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48646"
    },
    {
      "name": "CVE-2025-48609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48609"
    },
    {
      "name": "CVE-2025-47394",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47394"
    },
    {
      "name": "CVE-2025-48631",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48631"
    },
    {
      "name": "CVE-2026-0010",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0010"
    },
    {
      "name": "CVE-2025-61614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61614"
    },
    {
      "name": "CVE-2025-32313",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32313"
    },
    {
      "name": "CVE-2026-20402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20402"
    },
    {
      "name": "CVE-2026-21385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21385"
    },
    {
      "name": "CVE-2025-47385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47385"
    },
    {
      "name": "CVE-2026-0007",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0007"
    },
    {
      "name": "CVE-2025-20794",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20794"
    },
    {
      "name": "CVE-2026-0034",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0034"
    },
    {
      "name": "CVE-2026-0012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0012"
    },
    {
      "name": "CVE-2026-0008",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0008"
    },
    {
      "name": "CVE-2026-0047",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0047"
    },
    {
      "name": "CVE-2024-43859",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-43859"
    },
    {
      "name": "CVE-2025-48602",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48602"
    },
    {
      "name": "CVE-2025-61615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61615"
    },
    {
      "name": "CVE-2026-0028",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0028"
    },
    {
      "name": "CVE-2025-48654",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48654"
    },
    {
      "name": "CVE-2025-48605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48605"
    },
    {
      "name": "CVE-2025-47348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47348"
    },
    {
      "name": "CVE-2025-20795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20795"
    },
    {
      "name": "CVE-2025-59600",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59600"
    },
    {
      "name": "CVE-2025-20760",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20760"
    },
    {
      "name": "CVE-2025-64784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64784"
    },
    {
      "name": "CVE-2025-61613",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-61613"
    },
    {
      "name": "CVE-2025-20762",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20762"
    },
    {
      "name": "CVE-2025-38618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38618"
    },
    {
      "name": "CVE-2025-20793",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20793"
    },
    {
      "name": "CVE-2025-48582",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48582"
    },
    {
      "name": "CVE-2026-0027",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0027"
    },
    {
      "name": "CVE-2025-39946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-39946"
    },
    {
      "name": "CVE-2026-0021",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0021"
    },
    {
      "name": "CVE-2025-39682",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-39682"
    },
    {
      "name": "CVE-2026-0037",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0037"
    },
    {
      "name": "CVE-2025-48645",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48645"
    },
    {
      "name": "CVE-2025-48579",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48579"
    },
    {
      "name": "CVE-2026-20405",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20405"
    },
    {
      "name": "CVE-2026-0029",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0029"
    }
  ],
  "initial_release_date": "2026-03-03T00:00:00",
  "last_revision_date": "2026-03-03T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0231",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-03-03T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Android. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n\nGoogle indique que la vuln\u00e9rabilit\u00e9 CVE-2026-21385 est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Android",
  "vendor_advisories": [
    {
      "published_at": "2026-03-02",
      "title": "Bulletin de s\u00e9curit\u00e9 Google Android",
      "url": "https://source.android.com/docs/security/bulletin/2026/2026-03-01?hl=fr"
    }
  ]
}

FKIE_CVE-2026-20406

Vulnerability from fkie_nvd - Published: 2026-02-02 09:15 - Updated: 2026-06-17 10:17

Severity

6.5 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

References

	URL	Tags
	security@mediatek.com	https://corp.mediatek.com/product-security-bulletin/February-2026	Vendor Advisory

Impacted products

Vendor	Product	Version
mediatek	nr15	-
mediatek	nr16	-
mediatek	nr17	-
mediatek	nr17r	-
mediatek	mt2735	-
mediatek	mt2737	-
mediatek	mt6813	-
mediatek	mt6815	-
mediatek	mt6833	-
mediatek	mt6835	-
mediatek	mt6853	-
mediatek	mt6855	-
mediatek	mt6858	-
mediatek	mt6873	-
mediatek	mt6875	-
mediatek	mt6877	-
mediatek	mt6878	-
mediatek	mt6879	-
mediatek	mt6880	-
mediatek	mt6883	-
mediatek	mt6885	-
mediatek	mt6886	-
mediatek	mt6889	-
mediatek	mt6890	-
mediatek	mt6891	-
mediatek	mt6893	-
mediatek	mt6895	-
mediatek	mt6896	-
mediatek	mt6897	-
mediatek	mt6899	-
mediatek	mt6980	-
mediatek	mt6983	-
mediatek	mt6985	-
mediatek	mt6986	-
mediatek	mt6989	-
mediatek	mt6990	-
mediatek	mt6991	-
mediatek	mt6993	-
mediatek	mt8668	-
mediatek	mt8673	-
mediatek	mt8675	-
mediatek	mt8676	-
mediatek	mt8678	-
mediatek	mt8755	-
mediatek	mt8771	-
mediatek	mt8791	-
mediatek	mt8791t	-
mediatek	mt8792	-
mediatek	mt8793	-
mediatek	mt8795t	-
mediatek	mt8797	-
mediatek	mt8798	-
mediatek	mt8863	-
mediatek	mt8873	-
mediatek	mt8883	-
mediatek	mt8893	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "MediaTek chipset",
          "vendor": "MediaTek, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "MT2735"
            },
            {
              "status": "affected",
              "version": "MT2737"
            },
            {
              "status": "affected",
              "version": "MT6813"
            },
            {
              "status": "affected",
              "version": "MT6815"
            },
            {
              "status": "affected",
              "version": "MT6833"
            },
            {
              "status": "affected",
              "version": "MT6835"
            },
            {
              "status": "affected",
              "version": "MT6853"
            },
            {
              "status": "affected",
              "version": "MT6855"
            },
            {
              "status": "affected",
              "version": "MT6858"
            },
            {
              "status": "affected",
              "version": "MT6873"
            },
            {
              "status": "affected",
              "version": "MT6875"
            },
            {
              "status": "affected",
              "version": "MT6877"
            },
            {
              "status": "affected",
              "version": "MT6878"
            },
            {
              "status": "affected",
              "version": "MT6879"
            },
            {
              "status": "affected",
              "version": "MT6880"
            },
            {
              "status": "affected",
              "version": "MT6883"
            },
            {
              "status": "affected",
              "version": "MT6885"
            },
            {
              "status": "affected",
              "version": "MT6886"
            },
            {
              "status": "affected",
              "version": "MT6889"
            },
            {
              "status": "affected",
              "version": "MT6890"
            },
            {
              "status": "affected",
              "version": "MT6891"
            },
            {
              "status": "affected",
              "version": "MT6893"
            },
            {
              "status": "affected",
              "version": "MT6895"
            },
            {
              "status": "affected",
              "version": "MT6896"
            },
            {
              "status": "affected",
              "version": "MT6897"
            },
            {
              "status": "affected",
              "version": "MT6899"
            },
            {
              "status": "affected",
              "version": "MT6980"
            },
            {
              "status": "affected",
              "version": "MT6983"
            },
            {
              "status": "affected",
              "version": "MT6985"
            },
            {
              "status": "affected",
              "version": "MT6986"
            },
            {
              "status": "affected",
              "version": "MT6989"
            },
            {
              "status": "affected",
              "version": "MT6990"
            },
            {
              "status": "affected",
              "version": "MT6991"
            },
            {
              "status": "affected",
              "version": "MT6993"
            },
            {
              "status": "affected",
              "version": "MT8668"
            },
            {
              "status": "affected",
              "version": "MT8673"
            },
            {
              "status": "affected",
              "version": "MT8675"
            },
            {
              "status": "affected",
              "version": "MT8676"
            },
            {
              "status": "affected",
              "version": "MT8678"
            },
            {
              "status": "affected",
              "version": "MT8755"
            },
            {
              "status": "affected",
              "version": "MT8771"
            },
            {
              "status": "affected",
              "version": "MT8791"
            },
            {
              "status": "affected",
              "version": "MT8791T"
            },
            {
              "status": "affected",
              "version": "MT8792"
            },
            {
              "status": "affected",
              "version": "MT8793"
            },
            {
              "status": "affected",
              "version": "MT8795T"
            },
            {
              "status": "affected",
              "version": "MT8797"
            },
            {
              "status": "affected",
              "version": "MT8798"
            },
            {
              "status": "affected",
              "version": "MT8863"
            },
            {
              "status": "affected",
              "version": "MT8873"
            },
            {
              "status": "affected",
              "version": "MT8883"
            },
            {
              "status": "affected",
              "version": "MT8893"
            }
          ]
        }
      ],
      "source": "security@mediatek.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:nr15:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E30A2D2E-6A72-4070-A471-EEE75F7D07F2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:mediatek:nr16:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B763B71-F913-45B4-B91E-D7F0670C4315",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:mediatek:nr17:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "66F8874B-DBF1-4A67-8ADF-4654AB56B6A8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:mediatek:nr17r:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC63582A-F9A5-4450-A263-CE1FD4B4F3AC",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F1D09FC-5BE9-4B23-82F1-3C6EAC5711A6",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9C2A1118-B5F7-4EF5-B329-0887B5F3430E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "66F9EAE4-F1D7-46DB-AA2A-0290F6EF0501",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6815:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B7122918-8C44-4F24-82E4-B8448247FC83",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9814939B-F05E-4870-90C0-7C0F6BAAEB39",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "19A63103-C708-48EC-B44D-5E465A6B79C5",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "366F1912-756B-443E-9962-224937DD7DFB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6858:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C61AD730-66FE-4605-A89B-3B8D6526D612",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F6B8A36E-C5FB-44AE-A1C3-50EBF4C68F6B",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "80BDC5EC-E822-4BC7-8C0D-E8AD8396E8FE",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "855A8046-34ED-4891-ACE5-76AB10AC8D53",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "704BE5CE-AE08-4432-A8B0-4C8BD62148AD",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "68CF4A7A-3136-4C4C-A795-81323896BE11",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "15E2EC3F-9FB3-488B-B1C1-2793A416C755",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DD64413C-C774-4C4F-9551-89E1AA9469EE",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AF3E2B84-DAFE-4E11-B23B-026F719475F5",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3B787DC3-8E5A-4968-B20B-37B6257FAAE2",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "171D1C08-F055-44C0-913C-AA2B73AF5B72",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D8E91CA4-CA5B-40D1-9A96-2B875104BCF4",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "213B5C7F-D965-4312-9CDF-4F06FA77D401",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E0CA45C9-7BFE-4C93-B2AF-B86501F763AB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "33DEF766-EAF1-4E36-BB7C-43069B26507A",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A7D8055-F4B6-41EE-A078-11D56285AB66",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BA9131F6-F167-4FD7-8FBF-B372CBBCF46F",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB6B9A26-F8A1-4322-AA4E-CDF8F7D99000",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EA72CCD1-DEA2-48EB-8781-04CFDD41AAEE",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6986:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F419FE2-2D6D-48EE-9B6C-E88AC5D44186",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD7DE6B2-66D9-4A3E-B15F-D56505559255",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A76806D-A4E3-466A-90CB-E9FFE478E7A0",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CBBB30DF-E963-4940-B742-F6801F68C3FC",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "57E92BE0-5E65-4770-8E1A-0E5D07A38164",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8668:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2589C222-3D62-4BDB-98F2-5F1E38600D8D",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "152F6606-FA23-4530-AA07-419866B74CB3",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "03E6123A-7603-4EAB-AFFB-229E8A040709",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE302F6F-170E-4350-A8F4-65BE0C50CB78",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "152A5F3D-8004-4649-BDB1-E6F0798AF1CB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1CF88096-5CBD-4A4B-8F47-33D38985956F",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0D09F23D-D023-4A60-B426-61251FDD8A5A",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9CD2C3EC-B62D-4616-964F-FDBE5B14A449",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1BB05B1D-77C9-4E42-91AD-9F087413DC20",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "336FC69E-E89F-4642-B6B9-8009D9A2BD52",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "78D4E9E1-B044-41EC-BE98-22DC0E5E9010",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B469BF4-5961-42E9-814B-1BE06D182E45",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "637CAAD2-DCC0-4F81-B781-5D0536844CA8",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "77E0D738-F0B9-468F-8A10-204F498320BC",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6DD525F-7050-42BD-829D-1121698B8009",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "23DD8281-FEB4-4E23-8DDA-680FF895F12E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:mediatek:mt8893:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CCFAADB1-C2B2-47A6-BB66-761B964E7DFB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01726634; Issue ID: MSV-5728."
    },
    {
      "lang": "es",
      "value": "En el m\u00f3dem, existe una posible ca\u00edda del sistema debido a una excepci\u00f3n no capturada. Esto podr\u00eda llevar a una denegaci\u00f3n de servicio remota, si un UE se ha conectado a una estaci\u00f3n base maliciosa controlada por el atacante, sin necesidad de privilegios de ejecuci\u00f3n adicionales. No se necesita interacci\u00f3n del usuario para la explotaci\u00f3n. ID del parche: MOLY01726634; ID del problema: MSV-5728."
    }
  ],
  "id": "CVE-2026-20406",
  "lastModified": "2026-06-17T10:17:22.170",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "ADJACENT_NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-20406",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-02-17T14:13:31.407121Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-02-02T09:15:55.370",
  "references": [
    {
      "source": "security@mediatek.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://corp.mediatek.com/product-security-bulletin/February-2026"
    }
  ],
  "sourceIdentifier": "security@mediatek.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ],
      "source": "security@mediatek.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-754"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-6876-43RC-GJMQ

Vulnerability from github – Published: 2026-02-02 09:30 – Updated: 2026-02-03 00:30

Details

Severity

7.5 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-20406"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-754",
      "CWE-770"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-02-02T09:15:55Z",
    "severity": "HIGH"
  },
  "details": "In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01726634; Issue ID: MSV-5728.",
  "id": "GHSA-6876-43rc-gjmq",
  "modified": "2026-02-03T00:30:18Z",
  "published": "2026-02-02T09:30:31Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20406"
    },
    {
      "type": "WEB",
      "url": "https://corp.mediatek.com/product-security-bulletin/February-2026"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2026-0074

Vulnerability from csaf_ncscnl - Published: 2026-03-03 09:07 - Updated: 2026-03-03 09:07

Summary

Kwetsbaarheden verholpen in Google Android en Samsung Mobile

Scope

116 vulnerabilities in this advisory, including CVE-2026-20406.

CVE-2026-20406

A vulnerability in Modem could lead to a remote denial of service via a rogue base station due to an uncaught exception, with a patch (MOLY01726634) available for resolution.

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Known affected: 2 products

Open the full advisory

WID-SEC-W-2026-0569

Vulnerability from csaf_certbund - Published: 2026-03-02 23:00 - Updated: 2026-03-09 23:00

Summary

Google Android: Mehrere Schwachstellen

Severity

Kritisch

Scope

116 vulnerabilities in this advisory, including CVE-2026-20406.

CVE-2026-20406

Known affected: 5 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2026-20406 (GCVE-0-2026-20406)

CERTFR-2026-AVI-0231

Solutions

FKIE_CVE-2026-20406

GHSA-6876-43RC-GJMQ

NCSC-2026-0074

WID-SEC-W-2026-0569

Tags

Sightings

Nomenclature