# CVE-2026-20433: In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation… Source: https://junglewise.ai/threats/cve-2026-20433-in-modem-there-is-a-possible-out-of-bounds-write-due-to-a-missing Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Published: 2026-04-07 License: CC BY 4.0 with a link back CVE-2026-20433 · Severity: high · CVSS 8.8 · Published 2026-04-07 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01088681; Issue ID: MSV-4460. Technologies: [MediaTek MT2735](https://junglewise.ai/threats/technologies/mt2735), [MediaTek Mt2735 Firmware](https://junglewise.ai/threats/technologies/mt2735-firmware), [MediaTek MT2737](https://junglewise.ai/threats/technologies/mt2737), [MediaTek Mt2737 Firmware](https://junglewise.ai/threats/technologies/mt2737-firmware), [MediaTek MT6813](https://junglewise.ai/threats/technologies/mt6813), [MediaTek Mt6813 Firmware](https://junglewise.ai/threats/technologies/mt6813-firmware), [MediaTek MT6833](https://junglewise.ai/threats/technologies/mt6833), [MediaTek Mt6833 Firmware](https://junglewise.ai/threats/technologies/mt6833-firmware), [MediaTek Mt6833p](https://junglewise.ai/threats/technologies/mt6833p), [MediaTek Mt6835](https://junglewise.ai/threats/technologies/mt6835), [MediaTek Mt6835 Firmware](https://junglewise.ai/threats/technologies/mt6835-firmware), [MediaTek Mt6835t](https://junglewise.ai/threats/technologies/mt6835t), [MediaTek Mt6853](https://junglewise.ai/threats/technologies/mt6853), [MediaTek Mt6853 Firmware](https://junglewise.ai/threats/technologies/mt6853-firmware), [MediaTek Mt6853t](https://junglewise.ai/threats/technologies/mt6853t), [MediaTek Mt6855](https://junglewise.ai/threats/technologies/mt6855), [MediaTek Mt6855 Firmware](https://junglewise.ai/threats/technologies/mt6855-firmware), [MediaTek Mt6855t](https://junglewise.ai/threats/technologies/mt6855t), [MediaTek MT6873](https://junglewise.ai/threats/technologies/mt6873), [MediaTek Mt6873 Firmware](https://junglewise.ai/threats/technologies/mt6873-firmware), [MediaTek Mt6875](https://junglewise.ai/threats/technologies/mt6875), [MediaTek Mt6875 Firmware](https://junglewise.ai/threats/technologies/mt6875-firmware), [MediaTek Mt6875t](https://junglewise.ai/threats/technologies/mt6875t), [MediaTek Mt6877](https://junglewise.ai/threats/technologies/mt6877), [MediaTek Mt6877 Firmware](https://junglewise.ai/threats/technologies/mt6877-firmware), [MediaTek Mt6877t](https://junglewise.ai/threats/technologies/mt6877t), [MediaTek Mt6877tt](https://junglewise.ai/threats/technologies/mt6877tt), [MediaTek Mt6878](https://junglewise.ai/threats/technologies/mt6878), [MediaTek Mt6878 Firmware](https://junglewise.ai/threats/technologies/mt6878-firmware), [MediaTek Mt6879](https://junglewise.ai/threats/technologies/mt6879), [MediaTek Mt6879 Firmware](https://junglewise.ai/threats/technologies/mt6879-firmware), [MediaTek Mt6880](https://junglewise.ai/threats/technologies/mt6880), [MediaTek Mt6880 Firmware](https://junglewise.ai/threats/technologies/mt6880-firmware), [MediaTek Mt6883](https://junglewise.ai/threats/technologies/mt6883), [MediaTek Mt6883 Firmware](https://junglewise.ai/threats/technologies/mt6883-firmware), [MediaTek Mt6885](https://junglewise.ai/threats/technologies/mt6885), [MediaTek Mt6885 Firmware](https://junglewise.ai/threats/technologies/mt6885-firmware), [MediaTek Mt6886](https://junglewise.ai/threats/technologies/mt6886), [MediaTek Mt6886 Firmware](https://junglewise.ai/threats/technologies/mt6886-firmware), [MediaTek Mt6889](https://junglewise.ai/threats/technologies/mt6889), [MediaTek Mt6889 Firmware](https://junglewise.ai/threats/technologies/mt6889-firmware), [MediaTek Mt6890](https://junglewise.ai/threats/technologies/mt6890), [MediaTek Mt6890 Firmware](https://junglewise.ai/threats/technologies/mt6890-firmware), [MediaTek MT6891](https://junglewise.ai/threats/technologies/mt6891), [MediaTek Mt6891 Firmware](https://junglewise.ai/threats/technologies/mt6891-firmware), [MediaTek Mt6893](https://junglewise.ai/threats/technologies/mt6893), [MediaTek Mt6893 Firmware](https://junglewise.ai/threats/technologies/mt6893-firmware), [MediaTek Mt6895](https://junglewise.ai/threats/technologies/mt6895), [MediaTek Mt6895 Firmware](https://junglewise.ai/threats/technologies/mt6895-firmware), [MediaTek MT6896](https://junglewise.ai/threats/technologies/mt6896), [MediaTek Mt6896 Firmware](https://junglewise.ai/threats/technologies/mt6896-firmware), [MediaTek Mt6897](https://junglewise.ai/threats/technologies/mt6897), [MediaTek Mt6897 Firmware](https://junglewise.ai/threats/technologies/mt6897-firmware), [MediaTek Mt6899](https://junglewise.ai/threats/technologies/mt6899), [MediaTek Mt6899 Firmware](https://junglewise.ai/threats/technologies/mt6899-firmware), [MediaTek MT6980](https://junglewise.ai/threats/technologies/mt6980), [MediaTek Mt6980 Firmware](https://junglewise.ai/threats/technologies/mt6980-firmware), [MediaTek Mt6980d](https://junglewise.ai/threats/technologies/mt6980d), [MediaTek Mt6983](https://junglewise.ai/threats/technologies/mt6983), [MediaTek Mt6983 Firmware](https://junglewise.ai/threats/technologies/mt6983-firmware), [MediaTek Mt6985](https://junglewise.ai/threats/technologies/mt6985), [MediaTek Mt6985 Firmware](https://junglewise.ai/threats/technologies/mt6985-firmware), [MediaTek Mt6989](https://junglewise.ai/threats/technologies/mt6989), [MediaTek Mt6989 Firmware](https://junglewise.ai/threats/technologies/mt6989-firmware), [MediaTek MT6990](https://junglewise.ai/threats/technologies/mt6990), [MediaTek Mt6990 Firmware](https://junglewise.ai/threats/technologies/mt6990-firmware), [MediaTek Mt6991](https://junglewise.ai/threats/technologies/mt6991), [MediaTek Mt6991 Firmware](https://junglewise.ai/threats/technologies/mt6991-firmware), [MediaTek Mt8668](https://junglewise.ai/threats/technologies/mt8668), [MediaTek Mt8668 Firmware](https://junglewise.ai/threats/technologies/mt8668-firmware), [MediaTek Mt8673](https://junglewise.ai/threats/technologies/mt8673), [MediaTek Mt8673 Firmware](https://junglewise.ai/threats/technologies/mt8673-firmware), [MediaTek Mt8675](https://junglewise.ai/threats/technologies/mt8675), [MediaTek Mt8675 Firmware](https://junglewise.ai/threats/technologies/mt8675-firmware), [MediaTek MT8676](https://junglewise.ai/threats/technologies/mt8676), [MediaTek Mt8676 Firmware](https://junglewise.ai/threats/technologies/mt8676-firmware), [MediaTek MT8678](https://junglewise.ai/threats/technologies/mt8678), [MediaTek Mt8678 Firmware](https://junglewise.ai/threats/technologies/mt8678-firmware), [MediaTek MT8755](https://junglewise.ai/threats/technologies/mt8755), [MediaTek Mt8755 Firmware](https://junglewise.ai/threats/technologies/mt8755-firmware), [MediaTek Mt8771](https://junglewise.ai/threats/technologies/mt8771), [MediaTek Mt8771 Firmware](https://junglewise.ai/threats/technologies/mt8771-firmware), [MediaTek MT8775](https://junglewise.ai/threats/technologies/mt8775), [MediaTek Mt8775 Firmware](https://junglewise.ai/threats/technologies/mt8775-firmware), [MediaTek MT8791](https://junglewise.ai/threats/technologies/mt8791), [MediaTek Mt8791 Firmware](https://junglewise.ai/threats/technologies/mt8791-firmware), [MediaTek Mt8791t](https://junglewise.ai/threats/technologies/mt8791t), [MediaTek Mt8791t Firmware](https://junglewise.ai/threats/technologies/mt8791t-firmware), [MediaTek MT8792](https://junglewise.ai/threats/technologies/mt8792), [MediaTek Mt8792 Firmware](https://junglewise.ai/threats/technologies/mt8792-firmware), [MediaTek Mt8793](https://junglewise.ai/threats/technologies/mt8793), [MediaTek Mt8793 Firmware](https://junglewise.ai/threats/technologies/mt8793-firmware), [MediaTek MT8795T](https://junglewise.ai/threats/technologies/mt8795t), [MediaTek Mt8795t Firmware](https://junglewise.ai/threats/technologies/mt8795t-firmware), [MediaTek Mt8797](https://junglewise.ai/threats/technologies/mt8797), [MediaTek Mt8797 Firmware](https://junglewise.ai/threats/technologies/mt8797-firmware), [MediaTek Mt8798](https://junglewise.ai/threats/technologies/mt8798), [MediaTek Mt8798 Firmware](https://junglewise.ai/threats/technologies/mt8798-firmware), [MediaTek MT8863](https://junglewise.ai/threats/technologies/mt8863), [MediaTek Mt8863 Firmware](https://junglewise.ai/threats/technologies/mt8863-firmware), [MediaTek MT8873](https://junglewise.ai/threats/technologies/mt8873), [MediaTek Mt8873 Firmware](https://junglewise.ai/threats/technologies/mt8873-firmware), [MediaTek MT8883](https://junglewise.ai/threats/technologies/mt8883), [MediaTek Mt8883 Firmware](https://junglewise.ai/threats/technologies/mt8883-firmware), [MediaTek MT8893](https://junglewise.ai/threats/technologies/mt8893), [MediaTek Mt8893 Firmware](https://junglewise.ai/threats/technologies/mt8893-firmware). Vendors: [MediaTek](https://junglewise.ai/threats/vendors/mediatek). ## Quick answers **Is CVE-2026-20433 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-20433 being exploited in the wild. **How severe is CVE-2026-20433?** High severity, with a CVSS score of 8.8, published 7 April 2026. **Which products and versions are affected?** MediaTek MT2735, MediaTek Mt2735 Firmware, MediaTek MT2737, MediaTek Mt2737 Firmware and 120 more. The advisory does not name versions. **Is there a fix for CVE-2026-20433?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it. **Am I affected by CVE-2026-20433?** Check whether you run MediaTek MT2735, MediaTek Mt2735 Firmware, MediaTek MT2737 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you. ## Affected products - MediaTek MT2735 - MediaTek Mt2735 Firmware - MediaTek MT2737 - MediaTek Mt2737 Firmware - MediaTek MT6813 - MediaTek Mt6813 Firmware - MediaTek MT6833 - MediaTek Mt6833 Firmware - MediaTek Mt6833p - MediaTek Mt6833p Firmware - MediaTek Mt6835 - MediaTek Mt6835 Firmware - MediaTek Mt6835t - MediaTek Mt6835t Firmware - MediaTek Mt6853 - MediaTek Mt6853 Firmware - MediaTek Mt6853t - MediaTek Mt6853t Firmware - MediaTek Mt6855 - MediaTek Mt6855 Firmware - MediaTek Mt6855t - MediaTek Mt6855t Firmware - MediaTek MT6873 - MediaTek Mt6873 Firmware - MediaTek Mt6875 - MediaTek Mt6875 Firmware - MediaTek Mt6875t - MediaTek Mt6875t Firmware - MediaTek Mt6877 - MediaTek Mt6877 Firmware - MediaTek Mt6877t - MediaTek Mt6877t Firmware - MediaTek Mt6877tt - MediaTek Mt6877tt Firmware - MediaTek Mt6878 - MediaTek Mt6878 Firmware - MediaTek Mt6878m - MediaTek Mt6878m Firmware - MediaTek Mt6879 - MediaTek Mt6879 Firmware - MediaTek Mt6880 - MediaTek Mt6880 Firmware - MediaTek Mt6883 - MediaTek Mt6883 Firmware - MediaTek Mt6885 - MediaTek Mt6885 Firmware - MediaTek Mt6886 - MediaTek Mt6886 Firmware - MediaTek Mt6889 - MediaTek Mt6889 Firmware - MediaTek Mt6890 - MediaTek Mt6890 Firmware - MediaTek MT6891 - MediaTek Mt6891 Firmware - MediaTek Mt6893 - MediaTek Mt6893 Firmware - MediaTek Mt6895 - MediaTek Mt6895 Firmware - MediaTek Mt6895tt - MediaTek Mt6895tt Firmware - MediaTek MT6896 - MediaTek Mt6896 Firmware - MediaTek Mt6897 - MediaTek Mt6897 Firmware - MediaTek Mt6899 - MediaTek Mt6899 Firmware - MediaTek MT6980 - MediaTek Mt6980 Firmware - MediaTek Mt6980d - MediaTek Mt6980d Firmware - MediaTek Mt6983 - MediaTek Mt6983 Firmware - MediaTek Mt6983t - MediaTek Mt6983t Firmware - MediaTek Mt6985 - MediaTek Mt6985 Firmware - MediaTek Mt6985t - MediaTek Mt6985t Firmware - MediaTek Mt6989 - MediaTek Mt6989 Firmware - MediaTek Mt6989t - MediaTek Mt6989t Firmware - MediaTek MT6990 - MediaTek Mt6990 Firmware - MediaTek Mt6991 - MediaTek Mt6991 Firmware - MediaTek Mt8668 - MediaTek Mt8668 Firmware - MediaTek Mt8673 - MediaTek Mt8673 Firmware - MediaTek Mt8675 - MediaTek Mt8675 Firmware - MediaTek MT8676 - MediaTek Mt8676 Firmware - MediaTek MT8678 - MediaTek Mt8678 Firmware - MediaTek MT8755 - MediaTek Mt8755 Firmware - MediaTek Mt8771 - MediaTek Mt8771 Firmware - MediaTek MT8775 - MediaTek Mt8775 Firmware - MediaTek MT8791 - MediaTek Mt8791 Firmware - MediaTek Mt8791t - MediaTek Mt8791t Firmware - MediaTek MT8792 - MediaTek Mt8792 Firmware - MediaTek Mt8793 - MediaTek Mt8793 Firmware - MediaTek MT8795T - MediaTek Mt8795t Firmware - MediaTek Mt8797 - MediaTek Mt8797 Firmware - MediaTek Mt8798 - MediaTek Mt8798 Firmware - MediaTek MT8863 - MediaTek Mt8863 Firmware - MediaTek MT8873 - MediaTek Mt8873 Firmware - MediaTek MT8883 - MediaTek Mt8883 Firmware - MediaTek MT8893 - MediaTek Mt8893 Firmware ## Related threats - [MediaTek ccci out of bounds write](https://junglewise.ai/threats/cve-2026-20552-in-ccci-there-is-a-possible-out-of-bounds-write-due-to-a-missing) - [MediaTek vdec out-of-bounds write in type confusion](https://junglewise.ai/threats/cve-2026-20579-in-vdec-there-is-a-possible-out-of-bounds-write-due-to-type) - [MediaTek out of bounds write in modem](https://junglewise.ai/threats/cve-2026-20544-in-meta-there-is-a-possible-out-of-bounds-write-due-to-a-missing) - [MediaTek Modem information disclosure due to logic error](https://junglewise.ai/threats/cve-2026-20543-in-modem-there-is-a-possible-information-disclosure-due-to-a) - [MediaTek Modem out-of-bounds read due to missing permission check](https://junglewise.ai/threats/cve-2026-20538-in-modem-there-is-a-possible-out-of-bounds-read-due-to-a-missing)