CVE-2026-20432 | MediaTek MT8893 Base Station out-of-bounds write (MSV-4461)

A vulnerability categorized as critical has been discovered in MediaTek MT2735, MT2737, MT6779, MT6781, MT6783, MT6785, MT6789, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6896, MT6897, MT6899, MT6980, MT6983, MT6985, MT6989, MT6990, MT6991, MT6993, MT8668, MT8673, MT8675, MT8676, MT8678, MT8755, MT8771, MT8775, MT8781, MT8789, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883 and MT8893. Affected is an unknown function of the component Base Station Handler. Such manipulation leads to out-of-bounds write.

This vulnerability is documented as CVE-2026-20432. The attack can be executed remotely. There is not any exploit available.

A patch should be applied to remediate this issue.