Sign-up

ID

VAR-202602-0422


CVE

CVE-2026-20406


TITLE

media tech's NR15 Multiple vulnerabilities in multiple products, including

Trust: 0.8

sources: JVNDB: JVNDB-2026-002747

DESCRIPTION

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01726634; Issue ID: MSV-5728. Patch ID teeth MOLY01726634 So, the problem ID teeth MSV-5728 is.Information handled by the software will not be leaked to the outside. Information handled by the software will not be rewritten. In addition, the software may stop functioning completely. Furthermore, attacks that exploit this vulnerability will not affect other software

Trust: 1.62

sources: NVD: CVE-2026-20406 // JVNDB: JVNDB-2026-002747

AFFECTED PRODUCTS

vendor:mediatekmodel:nr17rscope:eqversion: -

Trust: 1.0

vendor:mediatekmodel:nr17scope:eqversion: -

Trust: 1.0

vendor:mediatekmodel:nr15scope:eqversion: -

Trust: 1.0

vendor:mediatekmodel:nr16scope:eqversion: -

Trust: 1.0

vendor:メディアテックmodel:nr17rscope: - version: -

Trust: 0.8

vendor:メディアテックmodel:nr17scope: - version: -

Trust: 0.8

vendor:メディアテックmodel:nr16scope: - version: -

Trust: 0.8

vendor:メディアテックmodel:nr15scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2026-002747 // NVD: CVE-2026-20406

CVSS

SEVERITY

CVSSV2

CVSSV3

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2026-20406
value: HIGH

Trust: 1.0

OTHER: JVNDB-2026-002747
value: HIGH

Trust: 0.8

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2026-20406
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.1

Trust: 1.0

OTHER: JVNDB-2026-002747
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2026-002747 // NVD: CVE-2026-20406

PROBLEMTYPE DATA

problemtype:CWE-770

Trust: 1.0

problemtype:CWE-754

Trust: 1.0

problemtype:Improper checking in exceptional conditions (CWE-754) [NVD evaluation ]

Trust: 0.8

problemtype: Allocation of resources without limits or throttling (CWE-770) [ others ]

Trust: 0.8

sources: JVNDB: JVNDB-2026-002747 // NVD: CVE-2026-20406

PATCH

title:February 2026url:https://corp.mediatek.com/product-security-bulletin/February-2026

Trust: 0.8

sources: JVNDB: JVNDB-2026-002747

EXTERNAL IDS

db:NVDid:CVE-2026-20406

Trust: 2.6

db:JVNDBid:JVNDB-2026-002747

Trust: 0.8

sources: JVNDB: JVNDB-2026-002747 // NVD: CVE-2026-20406

REFERENCES

url:https://corp.mediatek.com/product-security-bulletin/february-2026

Trust: 1.0

url:https://nvd.nist.gov/vuln/detail/cve-2026-20406

Trust: 0.8

sources: JVNDB: JVNDB-2026-002747 // NVD: CVE-2026-20406

SOURCES

db:JVNDBid:JVNDB-2026-002747
db:NVDid:CVE-2026-20406

LAST UPDATE DATE

2026-02-12T23:44:42.953000+00:00


SOURCES UPDATE DATE

db:JVNDBid:JVNDB-2026-002747date:2026-02-06T01:37:00
db:NVDid:CVE-2026-20406date:2026-02-04T13:52:44.517

SOURCES RELEASE DATE

db:JVNDBid:JVNDB-2026-002747date:2026-02-06T00:00:00
db:NVDid:CVE-2026-20406date:2026-02-02T09:15:55.370