---
id: CVE-2026-20565
title: >-
  In Modem, there is a possible out of bounds write due to an incorrect bounds
  check
summary: >-
  In Modem, there is a possible out of bounds write due to an incorrect bounds
  check. This could lead to local escalation of privilege with no additional
  execution privileges needed. User interaction is not needed for exploitation.
  Patch I…
severity: high
cvss: 8.4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: adp
cwe:
  - CWE-787
vendor: 'MediaTek, Inc.'
product: MediaTek chipset
affected:
  - mediatek_chipset MT2716
  - mediatek_chipset MT2735
  - mediatek_chipset MT2737
  - mediatek_chipset MT6739
  - mediatek_chipset MT6761
  - mediatek_chipset MT6762
  - mediatek_chipset MT6763
  - mediatek_chipset MT6765
  - mediatek_chipset MT6767
  - mediatek_chipset MT6768
  - mediatek_chipset MT6769
  - mediatek_chipset MT6771
  - mediatek_chipset MT6779
  - mediatek_chipset MT6781
  - mediatek_chipset MT6783
  - mediatek_chipset MT6785
  - mediatek_chipset MT6789
  - mediatek_chipset MT6813
  - mediatek_chipset MT6815
  - mediatek_chipset MT6833
  - mediatek_chipset MT6835
  - mediatek_chipset MT6853
  - mediatek_chipset MT6855
  - mediatek_chipset MT6858
  - mediatek_chipset MT6873
  - mediatek_chipset MT6875
  - mediatek_chipset MT6877
  - mediatek_chipset MT6878
  - mediatek_chipset MT6879
  - mediatek_chipset MT6880
  - mediatek_chipset MT6881
  - mediatek_chipset MT6883
  - mediatek_chipset MT6885
  - mediatek_chipset MT6886
  - mediatek_chipset MT6889
  - mediatek_chipset MT6890
  - mediatek_chipset MT6891
  - mediatek_chipset MT6893
  - mediatek_chipset MT6895
  - mediatek_chipset MT6896
  - mediatek_chipset MT6897
  - mediatek_chipset MT6899
  - mediatek_chipset MT6980
  - mediatek_chipset MT6982
  - mediatek_chipset MT6983
  - mediatek_chipset MT6985
  - mediatek_chipset MT6986
  - mediatek_chipset MT6988
  - mediatek_chipset MT6989
  - mediatek_chipset MT6990
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-11-02T00:00:00+00:00'
published: '2026-11-02'
updated: '2026-11-03'
sourceUpdated: '2026-11-03T04:55:34.657Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-20565'
references:
  - url: 'https://www.mediatek.com/product-security-bulletin/November-2026'
tags:
  - cve.org
epss: 0.00133
epssPercentile: 0.02878
ingestedAt: '2026-11-05T19:30:42.896Z'
---

## Overview

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778991; Issue ID: MSV-8900.

## Affected

- `mediatek_chipset MT2716`
- `mediatek_chipset MT2735`
- `mediatek_chipset MT2737`
- `mediatek_chipset MT6739`
- `mediatek_chipset MT6761`
- `mediatek_chipset MT6762`
- `mediatek_chipset MT6763`
- `mediatek_chipset MT6765`
- `mediatek_chipset MT6767`
- `mediatek_chipset MT6768`
- `mediatek_chipset MT6769`
- `mediatek_chipset MT6771`
- `mediatek_chipset MT6779`
- `mediatek_chipset MT6781`
- `mediatek_chipset MT6783`
- `mediatek_chipset MT6785`
- `mediatek_chipset MT6789`
- `mediatek_chipset MT6813`
- `mediatek_chipset MT6815`
- `mediatek_chipset MT6833`
- `mediatek_chipset MT6835`
- `mediatek_chipset MT6853`
- `mediatek_chipset MT6855`
- `mediatek_chipset MT6858`
- `mediatek_chipset MT6873`
- `mediatek_chipset MT6875`
- `mediatek_chipset MT6877`
- `mediatek_chipset MT6878`
- `mediatek_chipset MT6879`
- `mediatek_chipset MT6880`
- `mediatek_chipset MT6881`
- `mediatek_chipset MT6883`
- `mediatek_chipset MT6885`
- `mediatek_chipset MT6886`
- `mediatek_chipset MT6889`
- `mediatek_chipset MT6890`
- `mediatek_chipset MT6891`
- `mediatek_chipset MT6893`
- `mediatek_chipset MT6895`
- `mediatek_chipset MT6896`
- `mediatek_chipset MT6897`
- `mediatek_chipset MT6899`
- `mediatek_chipset MT6980`
- `mediatek_chipset MT6982`
- `mediatek_chipset MT6983`
- `mediatek_chipset MT6985`
- `mediatek_chipset MT6986`
- `mediatek_chipset MT6988`
- `mediatek_chipset MT6989`
- `mediatek_chipset MT6990`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.