Vulnerability-Lookup

CVE-2026-20431 (GCVE-0-2026-20431)

Vulnerability from cvelistv5 – Published: 2026-04-07 03:25 – Updated: 2026-04-07 12:59

Summary

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-07 12:59 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling
CWE-noinfo Not enough information

Assigner

MediaTek mitre root

References

1 reference

URL	Tags
https://corp.mediatek.com/product-security-bullet…

Impacted products

1 product

Vendor	Product	Version	CPE status
MediaTek, Inc.	MediaTek chipset	Affected: MT6813 Affected: MT6815 Affected: MT6835 Affected: MT6878 Affected: MT6897 Affected: MT6899 Affected: MT6986 Affected: MT6991 Affected: MT6993 Affected: MT8668 Affected: MT8676 Affected: MT8678 Affected: MT8755 Affected: MT8775 Affected: MT8792 Affected: MT8793 Affected: MT8863 Affected: MT8873 Affected: MT8883	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "ADJACENT_NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-20431",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-07T12:59:15.295899Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-07T12:59:17.543Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MediaTek chipset",
          "vendor": "MediaTek, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "MT6813"
            },
            {
              "status": "affected",
              "version": "MT6815"
            },
            {
              "status": "affected",
              "version": "MT6835"
            },
            {
              "status": "affected",
              "version": "MT6878"
            },
            {
              "status": "affected",
              "version": "MT6897"
            },
            {
              "status": "affected",
              "version": "MT6899"
            },
            {
              "status": "affected",
              "version": "MT6986"
            },
            {
              "status": "affected",
              "version": "MT6991"
            },
            {
              "status": "affected",
              "version": "MT6993"
            },
            {
              "status": "affected",
              "version": "MT8668"
            },
            {
              "status": "affected",
              "version": "MT8676"
            },
            {
              "status": "affected",
              "version": "MT8678"
            },
            {
              "status": "affected",
              "version": "MT8755"
            },
            {
              "status": "affected",
              "version": "MT8775"
            },
            {
              "status": "affected",
              "version": "MT8792"
            },
            {
              "status": "affected",
              "version": "MT8793"
            },
            {
              "status": "affected",
              "version": "MT8863"
            },
            {
              "status": "affected",
              "version": "MT8873"
            },
            {
              "status": "affected",
              "version": "MT8883"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-07T03:25:28.491Z",
        "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "shortName": "MediaTek"
      },
      "references": [
        {
          "url": "https://corp.mediatek.com/product-security-bulletin/April-2026"
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
    "assignerShortName": "MediaTek",
    "cveId": "CVE-2026-20431",
    "datePublished": "2026-04-07T03:25:28.491Z",
    "dateReserved": "2025-11-03T01:30:59.011Z",
    "dateUpdated": "2026-04-07T12:59:17.543Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-20431",
      "date": "2026-09-19",
      "epss": "0.00309",
      "percentile": "0.23935"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "MediaTek chipset",
                "vendor": "MediaTek, Inc.",
                "versions": [
                  {
                    "status": "affected",
                    "version": "MT6813"
                  },
                  {
                    "status": "affected",
                    "version": "MT6815"
                  },
                  {
                    "status": "affected",
                    "version": "MT6835"
                  },
                  {
                    "status": "affected",
                    "version": "MT6878"
                  },
                  {
                    "status": "affected",
                    "version": "MT6897"
                  },
                  {
                    "status": "affected",
                    "version": "MT6899"
                  },
                  {
                    "status": "affected",
                    "version": "MT6986"
                  },
                  {
                    "status": "affected",
                    "version": "MT6991"
                  },
                  {
                    "status": "affected",
                    "version": "MT6993"
                  },
                  {
                    "status": "affected",
                    "version": "MT8668"
                  },
                  {
                    "status": "affected",
                    "version": "MT8676"
                  },
                  {
                    "status": "affected",
                    "version": "MT8678"
                  },
                  {
                    "status": "affected",
                    "version": "MT8755"
                  },
                  {
                    "status": "affected",
                    "version": "MT8775"
                  },
                  {
                    "status": "affected",
                    "version": "MT8792"
                  },
                  {
                    "status": "affected",
                    "version": "MT8793"
                  },
                  {
                    "status": "affected",
                    "version": "MT8863"
                  },
                  {
                    "status": "affected",
                    "version": "MT8873"
                  },
                  {
                    "status": "affected",
                    "version": "MT8883"
                  }
                ]
              }
            ],
            "source": "security@mediatek.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6813_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0E1CB25C-4643-4239-AE47-B5AE876416ED",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "66F9EAE4-F1D7-46DB-AA2A-0290F6EF0501",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6815_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6FE3EEC2-1B07-40FA-90CA-3209C3578FA2",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6815:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B7122918-8C44-4F24-82E4-B8448247FC83",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6835_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "00B1D726-8183-4667-B46D-18EF110EA9D9",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "19A63103-C708-48EC-B44D-5E465A6B79C5",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6878_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "207954E6-D413-4762-9F4A-3A147CFB4FE2",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "855A8046-34ED-4891-ACE5-76AB10AC8D53",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6897_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A04EA650-730F-4E5D-A0E0-90570CACDD5E",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2A7D8055-F4B6-41EE-A078-11D56285AB66",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6899_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BEBA484A-EC07-4D3D-80CD-BDE9E7807F71",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6986_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "17581EC0-D68B-4EA3-845C-366C4A65FC6B",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6986:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1F419FE2-2D6D-48EE-9B6C-E88AC5D44186",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6991_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D9DD2119-39E8-4A9C-8E2A-8FB7F92A1001",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CBBB30DF-E963-4940-B742-F6801F68C3FC",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt6993_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FAEB2240-FF37-4CBE-BBEF-8A8281153646",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "57E92BE0-5E65-4770-8E1A-0E5D07A38164",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8668_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3EAACB56-716C-4E17-AB78-F5E68B75B791",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8668:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2589C222-3D62-4BDB-98F2-5F1E38600D8D",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8676_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "645D7C99-A0A0-4FB0-97AC-3DA5161A44D9",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EE302F6F-170E-4350-A8F4-65BE0C50CB78",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8678_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CFEC7A7B-6948-4B8A-BFA1-9F9D07043605",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "152A5F3D-8004-4649-BDB1-E6F0798AF1CB",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8755_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6B49A54E-B0C5-45C4-8396-5E6A2613E3B1",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1CF88096-5CBD-4A4B-8F47-33D38985956F",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8775_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FAA319BC-2689-497C-8D7D-482CD2AD89A1",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DE5FB550-7264-4879-BAF9-6798949113AF",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8792_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AE904A76-14A2-41D5-86FF-BCA686342E85",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "336FC69E-E89F-4642-B6B9-8009D9A2BD52",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8793_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "42C2F52D-C49C-4AFF-B6FA-FFA82EF96142",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8863_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "03A3F0E1-3226-4CB5-AE9F-BDA327590107",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "77E0D738-F0B9-468F-8A10-204F498320BC",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8873_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9D40337A-B78E-41CF-ADDC-A31190950F73",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D6DD525F-7050-42BD-829D-1121698B8009",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:mediatek:mt8883_firmware:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C5049DE8-5F0C-4E0D-85AE-F47CECE2DCE8",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "23DD8281-FEB4-4E23-8DDA-680FF895F12E",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467."
          },
          {
            "lang": "es",
            "value": "En el M\u00f3dem, existe una posible ca\u00edda del sistema debido a un error de l\u00f3gica. Esto podr\u00eda llevar a una denegaci\u00f3n de servicio remota, si un UE se ha conectado a una estaci\u00f3n base maliciosa controlada por el atacante, sin necesidad de privilegios de ejecuci\u00f3n adicionales. No se necesita interacci\u00f3n del usuario para la explotaci\u00f3n. ID del parche: MOLY01106496; ID del problema: MSV-4467."
          }
        ],
        "id": "CVE-2026-20431",
        "lastModified": "2026-07-24T22:10:00.140",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 3.6,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-20431",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-07T12:59:15.295899Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-04-07T04:16:59.930",
        "references": [
          {
            "source": "security@mediatek.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://corp.mediatek.com/product-security-bulletin/April-2026"
          }
        ],
        "sourceIdentifier": "security@mediatek.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-770"
              }
            ],
            "source": "security@mediatek.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2026-04-08T05:00:35+00:00",
      "cve": "CVE-2026-20431",
      "id": "CVE-2026-20431",
      "initial_release_date": "2026-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2026-20431",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-20431.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "ADJACENT_NETWORK",
                  "availabilityImpact": "HIGH",
                  "baseScore": 6.5,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "NONE",
                  "integrityImpact": "NONE",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-20431",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-07T12:59:15.295899Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "description": "CWE-noinfo Not enough information",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-07T12:59:10.087Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "MediaTek chipset",
              "vendor": "MediaTek, Inc.",
              "versions": [
                {
                  "status": "affected",
                  "version": "MT6813"
                },
                {
                  "status": "affected",
                  "version": "MT6815"
                },
                {
                  "status": "affected",
                  "version": "MT6835"
                },
                {
                  "status": "affected",
                  "version": "MT6878"
                },
                {
                  "status": "affected",
                  "version": "MT6897"
                },
                {
                  "status": "affected",
                  "version": "MT6899"
                },
                {
                  "status": "affected",
                  "version": "MT6986"
                },
                {
                  "status": "affected",
                  "version": "MT6991"
                },
                {
                  "status": "affected",
                  "version": "MT6993"
                },
                {
                  "status": "affected",
                  "version": "MT8668"
                },
                {
                  "status": "affected",
                  "version": "MT8676"
                },
                {
                  "status": "affected",
                  "version": "MT8678"
                },
                {
                  "status": "affected",
                  "version": "MT8755"
                },
                {
                  "status": "affected",
                  "version": "MT8775"
                },
                {
                  "status": "affected",
                  "version": "MT8792"
                },
                {
                  "status": "affected",
                  "version": "MT8793"
                },
                {
                  "status": "affected",
                  "version": "MT8863"
                },
                {
                  "status": "affected",
                  "version": "MT8873"
                },
                {
                  "status": "affected",
                  "version": "MT8883"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-770",
                  "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-07T03:25:28.491Z",
            "orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
            "shortName": "MediaTek"
          },
          "references": [
            {
              "url": "https://corp.mediatek.com/product-security-bulletin/April-2026"
            }
          ],
          "x_generator": {
            "engine": "cvelib 1.8.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374",
        "assignerShortName": "MediaTek",
        "cveId": "CVE-2026-20431",
        "datePublished": "2026-04-07T03:25:28.491Z",
        "dateReserved": "2025-11-03T01:30:59.011Z",
        "dateUpdated": "2026-04-07T12:59:17.543Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-0679

Vulnerability from certfr_avis - Published: 2026-06-02 - Updated: 2026-06-02

De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.

Google indique que la vulnérabilité CVE-2025-48595 est activement exploitée.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Google	Android	Android versions antérieures à 14, 15, 16, 16-qpr2 et Filet avant le correctif du 1er juin 2026

References

Title

Publication Time

Tags

Bulletin de sécurité Google Android

2026-06-01

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Android versions ant\u00e9rieures \u00e0 14, 15, 16, 16-qpr2 et Filet avant le correctif du 1er juin 2026",
      "product": {
        "name": "Android",
        "vendor": {
          "name": "Google",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-0075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0075"
    },
    {
      "name": "CVE-2025-47384",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47384"
    },
    {
      "name": "CVE-2026-0046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0046"
    },
    {
      "name": "CVE-2026-20449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20449"
    },
    {
      "name": "CVE-2026-22167",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22167"
    },
    {
      "name": "CVE-2026-0100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0100"
    },
    {
      "name": "CVE-2026-0042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0042"
    },
    {
      "name": "CVE-2026-21372",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21372"
    },
    {
      "name": "CVE-2026-0087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0087"
    },
    {
      "name": "CVE-2026-21546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21546"
    },
    {
      "name": "CVE-2026-28574",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28574"
    },
    {
      "name": "CVE-2026-0052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0052"
    },
    {
      "name": "CVE-2026-21378",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21378"
    },
    {
      "name": "CVE-2025-71254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71254"
    },
    {
      "name": "CVE-2026-0091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0091"
    },
    {
      "name": "CVE-2025-48595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48595"
    },
    {
      "name": "CVE-2026-0088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0088"
    },
    {
      "name": "CVE-2026-21374",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21374"
    },
    {
      "name": "CVE-2026-0016",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0016"
    },
    {
      "name": "CVE-2026-0078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0078"
    },
    {
      "name": "CVE-2026-0048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0048"
    },
    {
      "name": "CVE-2025-59606",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59606"
    },
    {
      "name": "CVE-2026-21736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21736"
    },
    {
      "name": "CVE-2026-28581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28581"
    },
    {
      "name": "CVE-2026-0044",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0044"
    },
    {
      "name": "CVE-2025-47401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47401"
    },
    {
      "name": "CVE-2026-0051",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0051"
    },
    {
      "name": "CVE-2026-21547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21547"
    },
    {
      "name": "CVE-2025-26418",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-26418"
    },
    {
      "name": "CVE-2026-21544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21544"
    },
    {
      "name": "CVE-2026-0050",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0050"
    },
    {
      "name": "CVE-2026-0096",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0096"
    },
    {
      "name": "CVE-2026-0055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0055"
    },
    {
      "name": "CVE-2026-0086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0086"
    },
    {
      "name": "CVE-2026-0061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0061"
    },
    {
      "name": "CVE-2026-0043",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0043"
    },
    {
      "name": "CVE-2026-20431",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20431"
    },
    {
      "name": "CVE-2026-21373",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21373"
    },
    {
      "name": "CVE-2025-48570",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48570"
    },
    {
      "name": "CVE-2026-20433",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20433"
    },
    {
      "name": "CVE-2026-0056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0056"
    },
    {
      "name": "CVE-2026-0095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0095"
    },
    {
      "name": "CVE-2026-21541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21541"
    },
    {
      "name": "CVE-2026-20432",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20432"
    },
    {
      "name": "CVE-2026-0076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0076"
    },
    {
      "name": "CVE-2025-47400",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47400"
    },
    {
      "name": "CVE-2025-48600",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48600"
    },
    {
      "name": "CVE-2026-0009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0009"
    },
    {
      "name": "CVE-2026-0070",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0070"
    },
    {
      "name": "CVE-2026-0039",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0039"
    },
    {
      "name": "CVE-2026-21542",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21542"
    },
    {
      "name": "CVE-2026-28586",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28586"
    },
    {
      "name": "CVE-2026-21353",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21353"
    },
    {
      "name": "CVE-2026-0036",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0036"
    },
    {
      "name": "CVE-2026-0069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0069"
    },
    {
      "name": "CVE-2025-48649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48649"
    },
    {
      "name": "CVE-2026-21545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21545"
    },
    {
      "name": "CVE-2026-0059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0059"
    },
    {
      "name": "CVE-2025-71255",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71255"
    },
    {
      "name": "CVE-2025-64505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64505"
    },
    {
      "name": "CVE-2026-28577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28577"
    },
    {
      "name": "CVE-2025-48648",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48648"
    },
    {
      "name": "CVE-2026-0077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0077"
    },
    {
      "name": "CVE-2025-48612",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48612"
    },
    {
      "name": "CVE-2026-0060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0060"
    },
    {
      "name": "CVE-2025-71256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71256"
    },
    {
      "name": "CVE-2026-21367",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21367"
    },
    {
      "name": "CVE-2025-71253",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71253"
    },
    {
      "name": "CVE-2026-0079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0079"
    },
    {
      "name": "CVE-2026-0099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0099"
    },
    {
      "name": "CVE-2025-64720",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-64720"
    },
    {
      "name": "CVE-2026-21538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21538"
    },
    {
      "name": "CVE-2026-28580",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28580"
    },
    {
      "name": "CVE-2026-28578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28578"
    },
    {
      "name": "CVE-2025-48652",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48652"
    },
    {
      "name": "CVE-2026-24089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24089"
    },
    {
      "name": "CVE-2025-65018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-65018"
    },
    {
      "name": "CVE-2026-21376",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21376"
    },
    {
      "name": "CVE-2026-21540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21540"
    },
    {
      "name": "CVE-2026-20455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20455"
    },
    {
      "name": "CVE-2026-20448",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20448"
    },
    {
      "name": "CVE-2026-0074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0074"
    },
    {
      "name": "CVE-2025-48581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48581"
    },
    {
      "name": "CVE-2025-22426",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22426"
    },
    {
      "name": "CVE-2026-21375",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21375"
    },
    {
      "name": "CVE-2025-40214",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40214"
    },
    {
      "name": "CVE-2026-21352",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21352"
    },
    {
      "name": "CVE-2026-21543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21543"
    },
    {
      "name": "CVE-2026-0093",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0093"
    },
    {
      "name": "CVE-2026-21381",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21381"
    },
    {
      "name": "CVE-2025-71252",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71252"
    },
    {
      "name": "CVE-2026-20435",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20435"
    },
    {
      "name": "CVE-2025-32348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-32348"
    },
    {
      "name": "CVE-2025-48616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48616"
    },
    {
      "name": "CVE-2025-47392",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47392"
    },
    {
      "name": "CVE-2026-20447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20447"
    },
    {
      "name": "CVE-2026-25277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25277"
    },
    {
      "name": "CVE-2026-0094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0094"
    },
    {
      "name": "CVE-2026-22163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22163"
    },
    {
      "name": "CVE-2026-25276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-25276"
    },
    {
      "name": "CVE-2026-0045",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0045"
    },
    {
      "name": "CVE-2026-20454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20454"
    },
    {
      "name": "CVE-2026-0067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0067"
    },
    {
      "name": "CVE-2025-48615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-48615"
    },
    {
      "name": "CVE-2026-21539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21539"
    },
    {
      "name": "CVE-2026-0085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0085"
    },
    {
      "name": "CVE-2026-0097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0097"
    },
    {
      "name": "CVE-2026-0089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0089"
    },
    {
      "name": "CVE-2025-71251",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71251"
    },
    {
      "name": "CVE-2025-59604",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59604"
    },
    {
      "name": "CVE-2025-59605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-59605"
    },
    {
      "name": "CVE-2026-0018",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0018"
    },
    {
      "name": "CVE-2025-47403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-47403"
    },
    {
      "name": "CVE-2026-0098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0098"
    },
    {
      "name": "CVE-2026-21380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-21380"
    },
    {
      "name": "CVE-2026-0080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0080"
    },
    {
      "name": "CVE-2026-20450",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20450"
    },
    {
      "name": "CVE-2026-0041",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0041"
    },
    {
      "name": "CVE-2026-0040",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-0040"
    },
    {
      "name": "CVE-2026-24085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24085"
    },
    {
      "name": "CVE-2026-20453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20453"
    },
    {
      "name": "CVE-2025-22424",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22424"
    }
  ],
  "initial_release_date": "2026-06-02T00:00:00",
  "last_revision_date": "2026-06-02T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0679",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-06-02T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Android. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n\nGoogle indique que la vuln\u00e9rabilit\u00e9 CVE-2025-48595 est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Android",
  "vendor_advisories": [
    {
      "published_at": "2026-06-01",
      "title": "Bulletin de s\u00e9curit\u00e9 Google Android",
      "url": "https://source.android.com/docs/security/bulletin/2026/2026-06-01?hl=fr"
    }
  ]
}

FKIE_CVE-2026-20431

Vulnerability from fkie_nvd - Published: 2026-04-07 04:16 - Updated: 2026-07-24 22:10

Severity

6.5 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

References

	URL	Tags
	security@mediatek.com	https://corp.mediatek.com/product-security-bulletin/April-2026	Vendor Advisory

Impacted products

Vendor	Product	Version
mediatek	mt6813_firmware	-
mediatek	mt6813	-
mediatek	mt6815_firmware	-
mediatek	mt6815	-
mediatek	mt6835_firmware	-
mediatek	mt6835	-
mediatek	mt6878_firmware	-
mediatek	mt6878	-
mediatek	mt6897_firmware	-
mediatek	mt6897	-
mediatek	mt6899_firmware	-
mediatek	mt6899	-
mediatek	mt6986_firmware	-
mediatek	mt6986	-
mediatek	mt6991_firmware	-
mediatek	mt6991	-
mediatek	mt6993_firmware	-
mediatek	mt6993	-
mediatek	mt8668_firmware	-
mediatek	mt8668	-
mediatek	mt8676_firmware	-
mediatek	mt8676	-
mediatek	mt8678_firmware	-
mediatek	mt8678	-
mediatek	mt8755_firmware	-
mediatek	mt8755	-
mediatek	mt8775_firmware	-
mediatek	mt8775	-
mediatek	mt8792_firmware	-
mediatek	mt8792	-
mediatek	mt8793_firmware	-
mediatek	mt8793	-
mediatek	mt8863_firmware	-
mediatek	mt8863	-
mediatek	mt8873_firmware	-
mediatek	mt8873	-
mediatek	mt8883_firmware	-
mediatek	mt8883	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "MediaTek chipset",
          "vendor": "MediaTek, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "MT6813"
            },
            {
              "status": "affected",
              "version": "MT6815"
            },
            {
              "status": "affected",
              "version": "MT6835"
            },
            {
              "status": "affected",
              "version": "MT6878"
            },
            {
              "status": "affected",
              "version": "MT6897"
            },
            {
              "status": "affected",
              "version": "MT6899"
            },
            {
              "status": "affected",
              "version": "MT6986"
            },
            {
              "status": "affected",
              "version": "MT6991"
            },
            {
              "status": "affected",
              "version": "MT6993"
            },
            {
              "status": "affected",
              "version": "MT8668"
            },
            {
              "status": "affected",
              "version": "MT8676"
            },
            {
              "status": "affected",
              "version": "MT8678"
            },
            {
              "status": "affected",
              "version": "MT8755"
            },
            {
              "status": "affected",
              "version": "MT8775"
            },
            {
              "status": "affected",
              "version": "MT8792"
            },
            {
              "status": "affected",
              "version": "MT8793"
            },
            {
              "status": "affected",
              "version": "MT8863"
            },
            {
              "status": "affected",
              "version": "MT8873"
            },
            {
              "status": "affected",
              "version": "MT8883"
            }
          ]
        }
      ],
      "source": "security@mediatek.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt6813_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0E1CB25C-4643-4239-AE47-B5AE876416ED",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "66F9EAE4-F1D7-46DB-AA2A-0290F6EF0501",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt6815_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6FE3EEC2-1B07-40FA-90CA-3209C3578FA2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt6815:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B7122918-8C44-4F24-82E4-B8448247FC83",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt6835_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "00B1D726-8183-4667-B46D-18EF110EA9D9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "19A63103-C708-48EC-B44D-5E465A6B79C5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt6878_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "207954E6-D413-4762-9F4A-3A147CFB4FE2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "855A8046-34ED-4891-ACE5-76AB10AC8D53",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt6897_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A04EA650-730F-4E5D-A0E0-90570CACDD5E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A7D8055-F4B6-41EE-A078-11D56285AB66",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt6899_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BEBA484A-EC07-4D3D-80CD-BDE9E7807F71",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C6E9F80F-9AC9-41E0-BB14-9DB6F14B62CD",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt6986_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "17581EC0-D68B-4EA3-845C-366C4A65FC6B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt6986:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F419FE2-2D6D-48EE-9B6C-E88AC5D44186",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt6991_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9DD2119-39E8-4A9C-8E2A-8FB7F92A1001",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CBBB30DF-E963-4940-B742-F6801F68C3FC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt6993_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FAEB2240-FF37-4CBE-BBEF-8A8281153646",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt6993:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "57E92BE0-5E65-4770-8E1A-0E5D07A38164",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt8668_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3EAACB56-716C-4E17-AB78-F5E68B75B791",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt8668:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2589C222-3D62-4BDB-98F2-5F1E38600D8D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt8676_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "645D7C99-A0A0-4FB0-97AC-3DA5161A44D9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE302F6F-170E-4350-A8F4-65BE0C50CB78",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt8678_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CFEC7A7B-6948-4B8A-BFA1-9F9D07043605",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "152A5F3D-8004-4649-BDB1-E6F0798AF1CB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt8755_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B49A54E-B0C5-45C4-8396-5E6A2613E3B1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1CF88096-5CBD-4A4B-8F47-33D38985956F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt8775_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FAA319BC-2689-497C-8D7D-482CD2AD89A1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DE5FB550-7264-4879-BAF9-6798949113AF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt8792_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AE904A76-14A2-41D5-86FF-BCA686342E85",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "336FC69E-E89F-4642-B6B9-8009D9A2BD52",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt8793_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "42C2F52D-C49C-4AFF-B6FA-FFA82EF96142",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt8863_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "03A3F0E1-3226-4CB5-AE9F-BDA327590107",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "77E0D738-F0B9-468F-8A10-204F498320BC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt8873_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D40337A-B78E-41CF-ADDC-A31190950F73",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6DD525F-7050-42BD-829D-1121698B8009",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:mediatek:mt8883_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5049DE8-5F0C-4E0D-85AE-F47CECE2DCE8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "23DD8281-FEB4-4E23-8DDA-680FF895F12E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467."
    },
    {
      "lang": "es",
      "value": "En el M\u00f3dem, existe una posible ca\u00edda del sistema debido a un error de l\u00f3gica. Esto podr\u00eda llevar a una denegaci\u00f3n de servicio remota, si un UE se ha conectado a una estaci\u00f3n base maliciosa controlada por el atacante, sin necesidad de privilegios de ejecuci\u00f3n adicionales. No se necesita interacci\u00f3n del usuario para la explotaci\u00f3n. ID del parche: MOLY01106496; ID del problema: MSV-4467."
    }
  ],
  "id": "CVE-2026-20431",
  "lastModified": "2026-07-24T22:10:00.140",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "ADJACENT_NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-20431",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-04-07T12:59:15.295899Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-04-07T04:16:59.930",
  "references": [
    {
      "source": "security@mediatek.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://corp.mediatek.com/product-security-bulletin/April-2026"
    }
  ],
  "sourceIdentifier": "security@mediatek.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ],
      "source": "security@mediatek.com",
      "type": "Secondary"
    }
  ]
}

GHSA-6PQ9-8556-QR3W

Vulnerability from github – Published: 2026-04-07 06:30 – Updated: 2026-04-07 15:30

Details

Severity

6.5 (Medium)


                  
                    CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-20431"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-770"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-04-07T04:16:59Z",
    "severity": "MODERATE"
  },
  "details": "In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01106496; Issue ID: MSV-4467.",
  "id": "GHSA-6pq9-8556-qr3w",
  "modified": "2026-04-07T15:30:48Z",
  "published": "2026-04-07T06:30:27Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20431"
    },
    {
      "type": "WEB",
      "url": "https://corp.mediatek.com/product-security-bulletin/April-2026"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

WID-SEC-W-2026-0974

Vulnerability from csaf_certbund - Published: 2026-04-06 22:00 - Updated: 2026-06-01 22:00

Summary

Samsung Android: Mehrere Schwachstellen

Severity

Hoch

Scope

51 vulnerabilities in this advisory, including CVE-2026-20431.

CVE-2026-20431

Known affected: 1 product

Open the full advisory

WID-SEC-W-2026-1772

Vulnerability from csaf_certbund - Published: 2026-06-01 22:00 - Updated: 2026-06-01 22:00

Summary

Google Android: Mehrere Schwachstellen

Severity

Kritisch

Scope

122 vulnerabilities in this advisory, including CVE-2026-20431.

CVE-2026-20431

Known affected: 1 product

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-20431 (GCVE-0-2026-20431)

CERTFR-2026-AVI-0679

Solutions

FKIE_CVE-2026-20431

GHSA-6PQ9-8556-QR3W

WID-SEC-W-2026-0974

WID-SEC-W-2026-1772

Tags

Sightings

Nomenclature

Related by attack behaviour