> CVE-2026-20503

« BACK_TO_HOME
PUBLISHED
2026-09-07 02:17
MODIFIED
2026-09-07 02:17
EPSS (Prob. Exploit)
0.19%
Top 91.6%
DATA SOURCES:
NVD 🔗 2026-09-07 CWE MITRE 🔗 2026-10-01 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01371002; Issue ID: MSV-9020.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-617

> CWE DETAILED DESCRIPTIONS

CWE-617: Reachable Assertion - The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

> HISTORIQUE DES MODIFICATIONS

Première apparition
07/09/2026 02:17
Source: NVD
📊 ENRICHISSEMENT 01/10/2026 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-617: Reachable Assertion - The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than...
Total des modifications: 1 Dernière mise à jour: 3 weeks ago

> REFERENCES

https://www.mediatek.com/product-security-bulletin/September-2026
« BACK_TO_HOME