PT-2026-30788 · Mediatek · Mediatek Chipset+19

Published 2026-04-07 · Updated 2026-04-19 · CVE-2026-20431

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Modem (affected versions not specified)

Description A logic error may cause a system crash, potentially leading to a remote denial of service. This occurs if a User Equipment (UE) connects to a rogue base station controlled by an attacker. No additional execution privileges or user interaction are required for exploitation.

Recommendations Apply patch MOLY01106496.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2026-20431

Affected Products

Mediatek Chipset

Mt6813 Firmware

Mt6815 Firmware

Mt6835 Firmware

Mt6878 Firmware

Mt6897 Firmware

Mt6899 Firmware

Mt6986 Firmware

Mt6991 Firmware

Mt6993 Firmware

Mt8668 Firmware

Mt8676 Firmware

Mt8678 Firmware

Mt8755 Firmware

Mt8775 Firmware

Mt8792 Firmware

Mt8793 Firmware

Mt8863 Firmware

Mt8873 Firmware

Mt8883 Firmware

References · 4

• https://corp.mediatek.com/product-security-bulletin/April-2026 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20431 · Security Note
• https://twitter.com/infoflowcloud/status/2045974463624192461 · Twitter Post
• https://twitter.com/CVEnew/status/2045972477634035733 · Twitter Post