Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Mon, 02 Nov 2026 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Side Channel Information Disclosure in MediaTek Modem Leading to Remote Denial of Service |
Mon, 02 Nov 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Mon, 02 Nov 2026 12:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Mediatek
Mediatek mediatek Chipset Mediatek, Inc. Mediatek, Inc. mediatek Chipset |
|
| Vendors & Products |
Mediatek
Mediatek mediatek Chipset Mediatek, Inc. Mediatek, Inc. mediatek Chipset |
Mon, 02 Nov 2026 04:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Side Channel Information Disclosure in MediaTek Modem Leading to Remote Denial of Service |
Mon, 02 Nov 2026 02:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01879164; Issue ID: MSV-9846. | |
| Weaknesses | CWE-757 | |
| References |
|
Status: PUBLISHED
Assigner: MediaTek
Published:
Updated: 2026-11-02T15:00:47.380Z
Reserved: 2025-11-03T01:30:59.048Z
Link: CVE-2026-20578
Updated: 2026-11-02T15:00:31.189Z
Status : Awaiting Analysis
Published: 2026-11-02T03:17:35.527
Modified: 2026-11-02T16:18:52.027
Link: CVE-2026-20578
No data.
OpenCVE Enrichment
Updated: 2026-11-02T17:15:13Z
-
CWE-757
Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')