{"id":"CVE-2026-20565","title":"In Modem, there is a possible out of bounds write due to an incorrect bounds check","summary":"In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch I…","severity":"high","cvss":8.4,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssSource":"adp","cwe":["CWE-787"],"vendor":"MediaTek, Inc.","product":"MediaTek chipset","affected":["mediatek_chipset MT2716","mediatek_chipset MT2735","mediatek_chipset MT2737","mediatek_chipset MT6739","mediatek_chipset MT6761","mediatek_chipset MT6762","mediatek_chipset MT6763","mediatek_chipset MT6765","mediatek_chipset MT6767","mediatek_chipset MT6768","mediatek_chipset MT6769","mediatek_chipset MT6771","mediatek_chipset MT6779","mediatek_chipset MT6781","mediatek_chipset MT6783","mediatek_chipset MT6785","mediatek_chipset MT6789","mediatek_chipset MT6813","mediatek_chipset MT6815","mediatek_chipset MT6833","mediatek_chipset MT6835","mediatek_chipset MT6853","mediatek_chipset MT6855","mediatek_chipset MT6858","mediatek_chipset MT6873","mediatek_chipset MT6875","mediatek_chipset MT6877","mediatek_chipset MT6878","mediatek_chipset MT6879","mediatek_chipset MT6880","mediatek_chipset MT6881","mediatek_chipset MT6883","mediatek_chipset MT6885","mediatek_chipset MT6886","mediatek_chipset MT6889","mediatek_chipset MT6890","mediatek_chipset MT6891","mediatek_chipset MT6893","mediatek_chipset MT6895","mediatek_chipset MT6896","mediatek_chipset MT6897","mediatek_chipset MT6899","mediatek_chipset MT6980","mediatek_chipset MT6982","mediatek_chipset MT6983","mediatek_chipset MT6985","mediatek_chipset MT6986","mediatek_chipset MT6988","mediatek_chipset MT6989","mediatek_chipset MT6990"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-11-02T00:00:00+00:00"},"published":"2026-11-02","updated":"2026-11-03","sourceUpdated":"2026-11-03T04:55:34.657Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-20565","references":[{"url":"https://www.mediatek.com/product-security-bulletin/November-2026"}],"tags":["cve.org"],"epss":0.00133,"epssPercentile":0.02878,"ingestedAt":"2026-11-05T19:30:42.896Z","slug":"CVE-2026-20565","body":"## Overview\n\nIn Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778991; Issue ID: MSV-8900.\n\n## Affected\n\n- `mediatek_chipset MT2716`\n- `mediatek_chipset MT2735`\n- `mediatek_chipset MT2737`\n- `mediatek_chipset MT6739`\n- `mediatek_chipset MT6761`\n- `mediatek_chipset MT6762`\n- `mediatek_chipset MT6763`\n- `mediatek_chipset MT6765`\n- `mediatek_chipset MT6767`\n- `mediatek_chipset MT6768`\n- `mediatek_chipset MT6769`\n- `mediatek_chipset MT6771`\n- `mediatek_chipset MT6779`\n- `mediatek_chipset MT6781`\n- `mediatek_chipset MT6783`\n- `mediatek_chipset MT6785`\n- `mediatek_chipset MT6789`\n- `mediatek_chipset MT6813`\n- `mediatek_chipset MT6815`\n- `mediatek_chipset MT6833`\n- `mediatek_chipset MT6835`\n- `mediatek_chipset MT6853`\n- `mediatek_chipset MT6855`\n- `mediatek_chipset MT6858`\n- `mediatek_chipset MT6873`\n- `mediatek_chipset MT6875`\n- `mediatek_chipset MT6877`\n- `mediatek_chipset MT6878`\n- `mediatek_chipset MT6879`\n- `mediatek_chipset MT6880`\n- `mediatek_chipset MT6881`\n- `mediatek_chipset MT6883`\n- `mediatek_chipset MT6885`\n- `mediatek_chipset MT6886`\n- `mediatek_chipset MT6889`\n- `mediatek_chipset MT6890`\n- `mediatek_chipset MT6891`\n- `mediatek_chipset MT6893`\n- `mediatek_chipset MT6895`\n- `mediatek_chipset MT6896`\n- `mediatek_chipset MT6897`\n- `mediatek_chipset MT6899`\n- `mediatek_chipset MT6980`\n- `mediatek_chipset MT6982`\n- `mediatek_chipset MT6983`\n- `mediatek_chipset MT6985`\n- `mediatek_chipset MT6986`\n- `mediatek_chipset MT6988`\n- `mediatek_chipset MT6989`\n- `mediatek_chipset MT6990`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":46,"depthScoreParts":{"impact":46.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}