Quick answers
- Is CVE-2026-20544 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-20544 being exploited in the wild.
- How severe is CVE-2026-20544?
- Medium severity, with a CVSS score of 6.8, published 5 October 2026.
- Which products and versions are affected?
- MediaTek MT2716; MediaTek MT2735; MediaTek MT2737; MediaTek MT6813; and 22 more.
- Is there a fix for CVE-2026-20544?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-20544 attacked?
- It is attacked with physical access, in device firmware.
- Am I affected by CVE-2026-20544?
- Check whether you run MediaTek Mt2716, MediaTek MT2735, MediaTek MT2737 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
An out-of-bounds write vulnerability (CWE-787) exists in the modem subcomponent due to missing bounds validation. The vulnerability requires physical access to the device but needs no prior execution privileges or user interaction. Successful exploitation grants local privilege escalation.
Affected products
- MediaTek MT2716
- MediaTek MT2735
- MediaTek MT2737
- MediaTek MT6813
- MediaTek MT6815
- MediaTek MT6833
- MediaTek MT6835
- MediaTek MT6853
- MediaTek MT6855
- MediaTek MT6858
- MediaTek MT6873
- MediaTek MT6875
- MediaTek MT6877
- MediaTek MT6878
- MediaTek MT6879
- MediaTek MT6880
- MediaTek MT6881
- MediaTek MT6883
- MediaTek MT6885
- MediaTek MT6886
- MediaTek MT6889
- MediaTek MT6890
- MediaTek MT6891
- MediaTek MT6893
- MediaTek MT6895
- MediaTek MT6896
Timeline
- 2026-10-05: disclosed