VulnSocial

CVE-2026-20422Disclosure(mediatek / mt2735)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00827332; Issue ID: MSV-5919.

mediatek CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-617

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • mt2735
  • mt2737
  • mt6813
  • mt6815

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-02-02); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
mediatek
Products
mt2735mt2737mt6813mt6815mt6833mt6835mt6853mt6855mt6858mt6873

1 version affected across 57 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-02-02: 1Mentions · 2026-02-10: 1Technical Details · 2026-02-02: 102-0202-10
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-02-021
Disclosure1
2026-02-101
General1
Full discourse2 posts
  • CERT-PY@CERTpy
    General

    ⚠️ Vulnerabilidades en productos MediaTek ❗ CVE-2026-20422 ❗ CVE-2026-20407 ❗ CVE-2026-20406 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-mediatek-5/ https://t.co/RPzfckkCnk

    Post summary

    The post lists MediaTek CVE identifiers and directs readers to external links for more information, but provides no technical details or evidence of exploitation.

    0000093
    6.6K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-20422 In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base statio… https://www.cve.org/CVERecord?id=CVE-2026-20422

    Post summary

    CVE-2026-20422 details a potential remote denial‑of‑service vulnerability in modems caused by improper input validation that may trigger a system crash. No proof‑of‑concept, exploit code, patch, or evidence of active exploitation is provided.

    00000202
    56.5K followersView on X
CPE platform detail57 entries

57 of 57 entries

PartVendorProductVersionTarget SWTarget HW
HWmediatekmt2735---
HWmediatekmt2737---
HWmediatekmt6813---
HWmediatekmt6815---
HWmediatekmt6833---
HWmediatekmt6835---
HWmediatekmt6853---
HWmediatekmt6855---
HWmediatekmt6858---
HWmediatekmt6873---
HWmediatekmt6875---
HWmediatekmt6877---
HWmediatekmt6878---
HWmediatekmt6879---
HWmediatekmt6880---
HWmediatekmt6883---
HWmediatekmt6885---
HWmediatekmt6886---
HWmediatekmt6889---
HWmediatekmt6890---
HWmediatekmt6891---
HWmediatekmt6893---
HWmediatekmt6895---
HWmediatekmt6896---
HWmediatekmt6897---
HWmediatekmt6899---
HWmediatekmt6980---
HWmediatekmt6983---
HWmediatekmt6985---
HWmediatekmt6986---
HWmediatekmt6989---
HWmediatekmt6990---
HWmediatekmt6991---
HWmediatekmt6993---
HWmediatekmt8668---
HWmediatekmt8673---
HWmediatekmt8675---
HWmediatekmt8676---
HWmediatekmt8678---
HWmediatekmt8755---
HWmediatekmt8771---
HWmediatekmt8775---
HWmediatekmt8791---
HWmediatekmt8791t---
HWmediatekmt8792---
HWmediatekmt8793---
HWmediatekmt8795t---
HWmediatekmt8797---
HWmediatekmt8798---
HWmediatekmt8863---
HWmediatekmt8873---
HWmediatekmt8883---
HWmediatekmt8893---
OSmediateknr15---
OSmediateknr16---
OSmediateknr17---
OSmediateknr17r---

Explore more

Back to dashboardmediatek CVEsmt2735 vulnerabilities