VulnSocial

CVE-2026-20402General(mediatek / mt2735)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00693083; Issue ID: MSV-5928.

mediatek CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • mt2735
  • mt6833
  • mt6853
  • mt6855

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-02-02); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
mediatek
Products
mt2735mt6833mt6853mt6855mt6873mt6875mt6877mt6880mt6883mt6885

1 version affected across 20 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-02-02: 1Mentions · 2026-02-07: 1Technical Details · 2026-02-02: 1Technical Details · 2026-02-07: 102-0202-07
Signal classification2 categories
General
150.0%
Disclosure
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-02-021
General1
2026-02-071
Disclosure1
Full discourse2 posts
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2026-20402 (CVSS:7.5, HIGH) is Analyzed. In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service..https://nvd.nist.gov/vuln/detail/CVE-2026-20402 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post provides basic details about CVE-2026-20402, noting a high CVSS score and potential for remote denial of service due to input validation issues, but offers no proof of exploitation or mitigation.

    0000035
    171 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-20402 In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base statio… https://www.cve.org/CVERecord?id=CVE-2026-20402

    Post summary

    CVE-2026-20402 describes a modem vulnerability where improper input validation can cause a system crash and remote denial‑of‑service. No PoC, exploit, active exploitation, or patch is mentioned.

    00000209
    56.5K followersView on X
CPE platform detail20 entries

20 of 20 entries

PartVendorProductVersionTarget SWTarget HW
HWmediatekmt2735---
HWmediatekmt6833---
HWmediatekmt6853---
HWmediatekmt6855---
HWmediatekmt6873---
HWmediatekmt6875---
HWmediatekmt6877---
HWmediatekmt6880---
HWmediatekmt6883---
HWmediatekmt6885---
HWmediatekmt6889---
HWmediatekmt6890---
HWmediatekmt6891---
HWmediatekmt6893---
HWmediatekmt8675---
HWmediatekmt8771---
HWmediatekmt8791---
HWmediatekmt8791t---
HWmediatekmt8797---
OSmediateknr15---

Explore more

Back to dashboardmediatek CVEsmt2735 vulnerabilities