VulnSocial

CVE-2026-20449Disclosure(mediatek / mt2735)

LOWCVSS 6.5 · MEDIUM

Signal is active with 4 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01760138; Issue ID: MSV-6148.

mediatek CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-120

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • mt2735
  • mt2735_firmware
  • mt2737
  • mt2737_firmware

Threat summary

  • 4 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • 4 total mentions across 1 day

Affected systems

Vendors
mediatek
Products
mt2735mt2735_firmwaremt2737mt2737_firmwaremt6739mt6739_firmwaremt6761mt6761_firmwaremt6762mt6762_firmware

1 version affected across 136 products

Deep dive

Activity timeline4 mentions / 1d
01234Mentions · 2026-05-04: 4Technical Details · 2026-05-04: 305-04
Signal classification2 categories
Disclosure
375.0%
General
125.0%
Referenced assets4 URLs
Full discourse4 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-20449 In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station c… https://www.cve.org/CVERecord?id=CVE-2026-20449

    Post summary

    The message announces a new vulnerability—CVE-2026-20449—highlighting a heap buffer overflow that could cause remote denial of service when a UE connects to a rogue base station.

    00020204
    57.7K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-20449 Heap Buffer Overflow Remote Denial of Service in Modem https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20449

    Post summary

    The entry announces CVE-2026‑20449, noting a heap buffer overflow that could cause remote denial of service on modems, and links to a vulnerability details page.

    0000058
    4.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-20449 In Modem, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service, if a UE has connected to a rogue base station c… https://www.cve.org/CVERecord?id=CVE-2026-20449 ----- Traducción: CVE-2026-20449 En … http://infoflow.cloud`

    Post summary

    The communication announces CVE-2026-20449, describing a heap buffer overflow in the modem that may cause a system crash and remote denial of service when a user equipment connects to a rogue base station.

    0000027
    75 followersView on X
  • VulDB 🛡@vuldb
    General

    The severity is increased for this new vulnerability affecting MediaTek MT2735 and other products (CVE-2026-20449) https://vuldb.com/vuln/360939

    Post summary

    The post notes a severity increase for CVE-2026-20449 affecting MediaTek MT2735 and other products, linking to a vulnerability database entry, without providing details about exploitation, mitigation, or evidence of active attacks.

    0000061
    2.1K followersView on X
CPE platform detail136 entries

136 of 136 entries

PartVendorProductVersionTarget SWTarget HW
HWmediatekmt2735---
OSmediatekmt2735_firmware---
HWmediatekmt2737---
OSmediatekmt2737_firmware---
HWmediatekmt6739---
OSmediatekmt6739_firmware---
HWmediatekmt6761---
OSmediatekmt6761_firmware---
HWmediatekmt6762---
OSmediatekmt6762_firmware---
HWmediatekmt6763---
OSmediatekmt6763_firmware---
HWmediatekmt6765---
OSmediatekmt6765_firmware---
HWmediatekmt6767---
OSmediatekmt6767_firmware---
HWmediatekmt6768---
OSmediatekmt6768_firmware---
HWmediatekmt6769---
OSmediatekmt6769_firmware---
HWmediatekmt6771---
OSmediatekmt6771_firmware---
HWmediatekmt6779---
OSmediatekmt6779_firmware---
HWmediatekmt6781---
OSmediatekmt6781_firmware---
HWmediatekmt6783---
OSmediatekmt6783_firmware---
HWmediatekmt6785---
OSmediatekmt6785_firmware---
HWmediatekmt6789---
OSmediatekmt6789_firmware---
HWmediatekmt6813---
OSmediatekmt6813_firmware---
HWmediatekmt6815---
OSmediatekmt6815_firmware---
HWmediatekmt6833---
OSmediatekmt6833_firmware---
HWmediatekmt6835---
OSmediatekmt6835_firmware---
HWmediatekmt6853---
OSmediatekmt6853_firmware---
HWmediatekmt6855---
OSmediatekmt6855_firmware---
HWmediatekmt6858---
OSmediatekmt6858_firmware---
HWmediatekmt6873---
OSmediatekmt6873_firmware---
HWmediatekmt6875---
OSmediatekmt6875_firmware---
HWmediatekmt6877---
OSmediatekmt6877_firmware---
HWmediatekmt6878---
OSmediatekmt6878_firmware---
HWmediatekmt6879---
OSmediatekmt6879_firmware---
HWmediatekmt6880---
OSmediatekmt6880_firmware---
HWmediatekmt6883---
OSmediatekmt6883_firmware---
HWmediatekmt6885---
OSmediatekmt6885_firmware---
HWmediatekmt6886---
OSmediatekmt6886_firmware---
HWmediatekmt6889---
OSmediatekmt6889_firmware---
HWmediatekmt6890---
OSmediatekmt6890_firmware---
HWmediatekmt6891---
OSmediatekmt6891_firmware---
HWmediatekmt6893---
OSmediatekmt6893_firmware---
HWmediatekmt6895---
OSmediatekmt6895_firmware---
HWmediatekmt6896---
OSmediatekmt6896_firmware---
HWmediatekmt6897---
OSmediatekmt6897_firmware---
HWmediatekmt6899---
OSmediatekmt6899_firmware---
HWmediatekmt6980---
OSmediatekmt6980_firmware---
HWmediatekmt6983---
OSmediatekmt6983_firmware---
HWmediatekmt6985---
OSmediatekmt6985_firmware---
HWmediatekmt6986d---
OSmediatekmt6986d_firmware---
HWmediatekmt6988---
OSmediatekmt6988_firmware---
HWmediatekmt6989---
OSmediatekmt6989_firmware---
HWmediatekmt6990---
OSmediatekmt6990_firmware---
HWmediatekmt6991---
OSmediatekmt6991_firmware---
HWmediatekmt6993---
OSmediatekmt6993_firmware---
HWmediatekmt8668---
OSmediatekmt8668_firmware---
HWmediatekmt8673---
OSmediatekmt8673_firmware---
HWmediatekmt8675---
OSmediatekmt8675_firmware---
HWmediatekmt8676---
OSmediatekmt8676_firmware---
HWmediatekmt8678---
OSmediatekmt8678_firmware---
HWmediatekmt8755---
OSmediatekmt8755_firmware---
HWmediatekmt8771---
OSmediatekmt8771_firmware---
HWmediatekmt8775---
OSmediatekmt8775_firmware---
HWmediatekmt8791---
OSmediatekmt8791_firmware---
HWmediatekmt8791t---
OSmediatekmt8791t_firmware---
HWmediatekmt8792---
OSmediatekmt8792_firmware---
HWmediatekmt8793---
OSmediatekmt8793_firmware---
HWmediatekmt8795t---
OSmediatekmt8795t_firmware---
HWmediatekmt8797---
OSmediatekmt8797_firmware---
HWmediatekmt8798---
OSmediatekmt8798_firmware---
HWmediatekmt8863---
OSmediatekmt8863_firmware---
HWmediatekmt8873---
OSmediatekmt8873_firmware---
HWmediatekmt8883---
OSmediatekmt8883_firmware---
HWmediatekmt8893---
OSmediatekmt8893_firmware---

Explore more

Back to dashboardmediatek CVEsmt2735 vulnerabilities