CVE-2026-20479: MediaTek MT2735 Firmware

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00741071; Issue ID: MSV-7620.

Affected products

• MediaTek MT2735 Firmware: affected versions not specified
• MediaTek MT6833 Firmware: affected versions not specified
• MediaTek MT6853 Firmware: affected versions not specified
• MediaTek MT6855 Firmware: affected versions not specified
• MediaTek MT6873 Firmware: affected versions not specified
• MediaTek MT6875 Firmware: affected versions not specified
• MediaTek MT6877 Firmware: affected versions not specified
• MediaTek MT6880 Firmware: affected versions not specified
• MediaTek MT6883 Firmware: affected versions not specified
• MediaTek MT6885 Firmware: affected versions not specified
• MediaTek MT6889 Firmware: affected versions not specified
• MediaTek MT6890 Firmware: affected versions not specified
• MediaTek MT6891 Firmware: affected versions not specified
• MediaTek MT6893 Firmware: affected versions not specified
• MediaTek MT8675 Firmware: affected versions not specified
• MediaTek MT8771 Firmware: affected versions not specified
• MediaTek MT8791 Firmware: affected versions not specified
• MediaTek MT8791T Firmware: affected versions not specified
• MediaTek MT8797 Firmware: affected versions not specified

Published 2026-08-03. Last modified 2026-08-19.