Description
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778991; Issue ID: MSV-8900.
Published: 2026-11-02
Score: n/a
EPSS: n/a
KEV: No
Impact: Local Privilege Escalation
Action: Apply Patch
AI Analysis

Impact

In MediaTek Modem firmware an out-of-bounds write arises from a missing bounds check, allowing local users to overwrite memory and gain elevated privileges without executing additional code.

Affected Systems

The vulnerability affects the MediaTek chipset used in the Modem firmware. No specific product or version list was provided, but the issue applies to all impacted MediaTek modem implementations.

Risk and Exploitability

The issue is locally exploitable with no user interaction required and does not require additional execution privileges. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog. The CVSS score is not supplied, but the described local privilege escalation suggests a high severity. Attackers would need local access to the device to exploit this flaw.

Generated by OpenCVE AI on November 2, 2026 at 03:20 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the MediaTek firmware update that includes patch ID MOLY01778991.
  • Reboot the device to load the updated modem driver.
  • Limit local access to the modem subsystem by restricting non‑privileged users from interacting with the modem.

Generated by OpenCVE AI on November 2, 2026 at 03:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 02 Nov 2026 03:45:00 +0000

Type Values Removed Values Added
Title Out of Bounds Write Leading to Local Privilege Escalation in MediaTek Modem

Mon, 02 Nov 2026 02:45:00 +0000

Type Values Removed Values Added
Description In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778991; Issue ID: MSV-8900.
Weaknesses CWE-787
References

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: MediaTek

Published:

Updated: 2026-11-02T02:33:32.905Z

Reserved: 2025-11-03T01:30:59.045Z

Link: CVE-2026-20565

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-02T03:17:33.830

Modified: 2026-11-02T03:17:33.830

Link: CVE-2026-20565

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-02T03:30:06Z

Weaknesses