attack vector is adjacent; attack complexity is high; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-787 (Out-of-bounds Write)
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
MediaTek
mt2735_firmware
MediaTek
mt6833_firmware
MediaTek
mt6853_firmware
MediaTek
mt6855_firmware
MediaTek
mt6873_firmware
MediaTek
mt6875_firmware
MediaTek
mt6877_firmware
MediaTek
mt6880_firmware
MediaTek
mt6883_firmware
MediaTek
mt6885_firmware
MediaTek
mt6889_firmware
MediaTek
mt6890_firmware
MediaTek
mt6891_firmware
MediaTek
mt6893_firmware
MediaTek
mt8771_firmware
MediaTek
mt8791_firmware
MediaTek
mt8791t_firmware
MediaTek
mt8797_firmware
MediaTek, Inc.
MediaTek chipset
MediaTek
mt8893_firmware
MediaTek
mt6835_firmware
MediaTek
mt6878_firmware
MediaTek
mt6879_firmware
MediaTek
mt6886_firmware
MediaTek
mt6895_firmware
MediaTek
mt6897_firmware
MediaTek
mt6983_firmware
MediaTek
mt6985_firmware
MediaTek
mt6989_firmware
MediaTek
mt6991_firmware
MediaTek
mt6993_firmware
MediaTek
mt8775_firmware
MediaTek
mt8792_firmware
MediaTek
mt8796_firmware
MediaTek
mt8873_firmware
MediaTek
mt8883_firmware
MediaTek
mt8668_firmware
MediaTek
mt8676_firmware
MediaTek
mt8678_firmware
MediaTek
mt8793_firmware
MediaTek
mt2716_firmware
MediaTek
mt2737_firmware
MediaTek
mt6813_firmware
MediaTek
mt6815_firmware
MediaTek
mt6858_firmware
MediaTek
mt6881_firmware
MediaTek
mt6896_firmware
MediaTek
mt6899_firmware
MediaTek
mt6980_firmware
MediaTek
mt6982_firmware
MediaTek
mt6986_firmware
MediaTek
mt6988_firmware
MediaTek
mt6990_firmware
MediaTek
mt8755_firmware
MediaTek
mt8798_firmware
MediaTek
mt8863_firmware
Subsystems
General OT
Sectors
Multiple
What to Know
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01898195; Issue ID: MSV-8906. (NVD)
What to Do
Monitor MediaTek's and MediaTek, Inc.'s web pages for any future patch releases. See vendor advisory link below.