CVE-2026-20504MEDIUM· 5.3MITRENVD대응게시일: 2026. 09. 07.수정일: 2026. 09. 09.CNA: security@mediatek.comAnalyzed

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected

위협 신호 · CVSS · EPSS · KEV

정기 패치· 높은 악용 신호 없음

CVSS

5.3medium

이론적 심각도 점수

EPSS

0.2%상위 91.2%

30일 내 악용 확률 예측

KEV

미등재

실측 악용 기록 없음

권장 대응 기한60일 이내CISA SSVC 기준

계획된 패치 주기 내 조치(60일 이내)

외부 노출· KEV 미등재 · 자동화 어려움 · 부분 영향 · 외부 노출

CVSS 벡터 · 메트릭

악용 경로

공격 벡터인접

공격 복잡도높음

필요 권한불필요

사용자 상호작용불필요

범위불변

영향

기밀성 영향없음

무결성 영향없음

가용성 영향높음

버전별 점수

CVSS 3.15.3MEDIUM· 악용성 1.6· 영향도 3.6

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

약점 (CWE)

CWE-617
도달 가능한 Assertion — 외부 입력으로 assert 가 발동해 충돌(DoS).

상세 설명

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00755024; Issue ID: MSV-7865.

AI 심층 분석

공격 시나리오 · 재현 가능한 PoC 페이로드 · 즉시 적용 가능한 차단 패치를 한 번에 받아 보세요. 보안 운영팀이 그대로 점검·티켓팅에 쓸 수 있는 형태로 정리해 드립니다.

영향받는 제품·버전

mediatek mt2735_firmware
other
mediatek mt2735
other
mediatek mt6833_firmware
other
mediatek mt6833
other
mediatek mt6853_firmware
other
mediatek mt6853
other
mediatek mt6855_firmware
other
mediatek mt6855
other
mediatek mt6873_firmware
other
mediatek mt6873
other
mediatek mt6875_firmware
other
mediatek mt6875
other
mediatek mt6877_firmware
other
mediatek mt6877
other
mediatek mt6880_firmware
other
mediatek mt6880
other
mediatek mt6883_firmware
other
mediatek mt6883
other
mediatek mt6885_firmware
other
mediatek mt6885
other
mediatek mt6889_firmware
other
mediatek mt6889
other
mediatek mt6890_firmware
other
mediatek mt6890
other
mediatek mt6891_firmware
other
mediatek mt6891
other
mediatek mt6893_firmware
other
mediatek mt6893
other
mediatek mt8675_firmware
other
mediatek mt8675
other
mediatek mt8771_firmware
other
mediatek mt8771
other
mediatek mt8791_firmware
other
mediatek mt8791
other
mediatek mt8791t_firmware
other
mediatek mt8791t
other
mediatek mt8797_firmware
other
mediatek mt8797
other

영향받는 구성 (CPE) 38

mediatek mt2735_firmwarecpe:2.3:o:mediatek:mt2735_firmware:-:*:*:*:*:*:*:*
mediatek mt2735cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*
mediatek mt6833_firmwarecpe:2.3:o:mediatek:mt6833_firmware:-:*:*:*:*:*:*:*
mediatek mt6833cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*
mediatek mt6853_firmwarecpe:2.3:o:mediatek:mt6853_firmware:-:*:*:*:*:*:*:*
mediatek mt6853cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*
mediatek mt6855_firmwarecpe:2.3:o:mediatek:mt6855_firmware:-:*:*:*:*:*:*:*
mediatek mt6855cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*
mediatek mt6873_firmwarecpe:2.3:o:mediatek:mt6873_firmware:-:*:*:*:*:*:*:*
mediatek mt6873cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*
mediatek mt6875_firmwarecpe:2.3:o:mediatek:mt6875_firmware:-:*:*:*:*:*:*:*
mediatek mt6875cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*
mediatek mt6877_firmwarecpe:2.3:o:mediatek:mt6877_firmware:-:*:*:*:*:*:*:*
mediatek mt6877cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*
mediatek mt6880_firmwarecpe:2.3:o:mediatek:mt6880_firmware:-:*:*:*:*:*:*:*
mediatek mt6880cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*
mediatek mt6883_firmwarecpe:2.3:o:mediatek:mt6883_firmware:-:*:*:*:*:*:*:*
mediatek mt6883cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*
mediatek mt6885_firmwarecpe:2.3:o:mediatek:mt6885_firmware:-:*:*:*:*:*:*:*
mediatek mt6885cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*
mediatek mt6889_firmwarecpe:2.3:o:mediatek:mt6889_firmware:-:*:*:*:*:*:*:*
mediatek mt6889cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*
mediatek mt6890_firmwarecpe:2.3:o:mediatek:mt6890_firmware:-:*:*:*:*:*:*:*
mediatek mt6890cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*
mediatek mt6891_firmwarecpe:2.3:o:mediatek:mt6891_firmware:-:*:*:*:*:*:*:*
mediatek mt6891cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*
mediatek mt6893_firmwarecpe:2.3:o:mediatek:mt6893_firmware:-:*:*:*:*:*:*:*
mediatek mt6893cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*
mediatek mt8675_firmwarecpe:2.3:o:mediatek:mt8675_firmware:-:*:*:*:*:*:*:*
mediatek mt8675cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*
mediatek mt8771_firmwarecpe:2.3:o:mediatek:mt8771_firmware:-:*:*:*:*:*:*:*
mediatek mt8771cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*
mediatek mt8791_firmwarecpe:2.3:o:mediatek:mt8791_firmware:-:*:*:*:*:*:*:*
mediatek mt8791cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*
mediatek mt8791t_firmwarecpe:2.3:o:mediatek:mt8791t_firmware:-:*:*:*:*:*:*:*
mediatek mt8791tcpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*
mediatek mt8797_firmwarecpe:2.3:o:mediatek:mt8797_firmware:-:*:*:*:*:*:*:*
mediatek mt8797cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*

참고 자료 1

https://www.mediatek.com/product-security-bulletin/September-2026
Vendor Advisory

링크 내용 불러오는 중…