In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege (EoP) if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09608864 / ALPS09327759; Issue ID: MSV-2958.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Mediatek
  • Mediatek Chipset
  • Mt2737
  • Mt2737 Firmware
  • Mt6813
  • Mt6813 Firmware
  • Mt6815
  • Mt6815 Firmware
  • Mt6835
  • Mt6835 Firmware
  • Mt6878
  • Mt6878 Firmware
  • Mt6879
  • Mt6879 Firmware
  • Mt6886
  • Mt6886 Firmware
  • Mt6895
  • Mt6895 Firmware
  • Mt6896
  • Mt6896 Firmware
  • Mt6897
  • Mt6897 Firmware
  • Mt6980
  • Mt6980 Firmware
  • Mt6983
  • Mt6983 Firmware
  • Mt6985
  • Mt6985 Firmware
  • Mt6990
  • Mt6990 Firmware
  • Mt8676
  • Mt8676 Firmware
  • Mt8755
  • Mt8755 Firmware
  • Mt8775
  • Mt8775 Firmware
  • Mt8792
  • Mt8792 Firmware
  • Mt8798
  • Mt8798 Firmware
  • Mt8863
  • Mt8863 Firmware
  • Mt8873
  • Mt8873 Firmware
  • Mt8883
  • Mt8883 Firmware
Mediatek, Inc.
  • Mediatek Chipset

Configuration 1 [-]

AND
cpe:2.3:o:mediatek:mt2737_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND
cpe:2.3:o:mediatek:mt6813_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND
cpe:2.3:o:mediatek:mt6815_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6815:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND
cpe:2.3:o:mediatek:mt6835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND
cpe:2.3:o:mediatek:mt6878_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND
cpe:2.3:o:mediatek:mt6879_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND
cpe:2.3:o:mediatek:mt6886_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND
cpe:2.3:o:mediatek:mt6895_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND
cpe:2.3:o:mediatek:mt6896_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND
cpe:2.3:o:mediatek:mt6897_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND
cpe:2.3:o:mediatek:mt6980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND
cpe:2.3:o:mediatek:mt6983_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND
cpe:2.3:o:mediatek:mt6985_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND
cpe:2.3:o:mediatek:mt6990_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND
cpe:2.3:o:mediatek:mt8676_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND
cpe:2.3:o:mediatek:mt8755_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND
cpe:2.3:o:mediatek:mt8775_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND
cpe:2.3:o:mediatek:mt8792_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*

Configuration 19 [-]

AND
cpe:2.3:o:mediatek:mt8798_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*

Configuration 20 [-]

AND
cpe:2.3:o:mediatek:mt8863_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*

Configuration 21 [-]

AND
cpe:2.3:o:mediatek:mt8873_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*

Configuration 22 [-]

AND
cpe:2.3:o:mediatek:mt8883_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*

No data.

References
Link Providers
https://www.mediatek.com/product-security-bulletin/November-2026 cve-icon cve-icon
History

Thu, 12 Nov 2026 17:00:00 +0000

Type Values Removed Values Added
First Time appeared Mediatek mt2737
Mediatek mt2737 Firmware
Mediatek mt6813
Mediatek mt6813 Firmware
Mediatek mt6815
Mediatek mt6815 Firmware
Mediatek mt6835
Mediatek mt6835 Firmware
Mediatek mt6878
Mediatek mt6878 Firmware
Mediatek mt6879
Mediatek mt6879 Firmware
Mediatek mt6886
Mediatek mt6886 Firmware
Mediatek mt6895
Mediatek mt6895 Firmware
Mediatek mt6896
Mediatek mt6896 Firmware
Mediatek mt6897
Mediatek mt6897 Firmware
Mediatek mt6980
Mediatek mt6980 Firmware
Mediatek mt6983
Mediatek mt6983 Firmware
Mediatek mt6985
Mediatek mt6985 Firmware
Mediatek mt6990
Mediatek mt6990 Firmware
Mediatek mt8676
Mediatek mt8676 Firmware
Mediatek mt8755
Mediatek mt8755 Firmware
Mediatek mt8775
Mediatek mt8775 Firmware
Mediatek mt8792
Mediatek mt8792 Firmware
Mediatek mt8798
Mediatek mt8798 Firmware
Mediatek mt8863
Mediatek mt8863 Firmware
Mediatek mt8873
Mediatek mt8873 Firmware
Mediatek mt8883
Mediatek mt8883 Firmware
CPEs cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6815:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt2737_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6813_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6815_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6878_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6879_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6886_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6895_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6896_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6897_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6983_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6985_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6990_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8676_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8755_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8775_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8792_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8798_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8863_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8873_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8883_firmware:-:*:*:*:*:*:*:*
Vendors & Products Mediatek mt2737
Mediatek mt2737 Firmware
Mediatek mt6813
Mediatek mt6813 Firmware
Mediatek mt6815
Mediatek mt6815 Firmware
Mediatek mt6835
Mediatek mt6835 Firmware
Mediatek mt6878
Mediatek mt6878 Firmware
Mediatek mt6879
Mediatek mt6879 Firmware
Mediatek mt6886
Mediatek mt6886 Firmware
Mediatek mt6895
Mediatek mt6895 Firmware
Mediatek mt6896
Mediatek mt6896 Firmware
Mediatek mt6897
Mediatek mt6897 Firmware
Mediatek mt6980
Mediatek mt6980 Firmware
Mediatek mt6983
Mediatek mt6983 Firmware
Mediatek mt6985
Mediatek mt6985 Firmware
Mediatek mt6990
Mediatek mt6990 Firmware
Mediatek mt8676
Mediatek mt8676 Firmware
Mediatek mt8755
Mediatek mt8755 Firmware
Mediatek mt8775
Mediatek mt8775 Firmware
Mediatek mt8792
Mediatek mt8792 Firmware
Mediatek mt8798
Mediatek mt8798 Firmware
Mediatek mt8863
Mediatek mt8863 Firmware
Mediatek mt8873
Mediatek mt8873 Firmware
Mediatek mt8883
Mediatek mt8883 Firmware

Mon, 02 Nov 2026 17:30:00 +0000

Type Values Removed Values Added
Title Privilege Escalation via Permissions Bypass in MediaTek Modem

Mon, 02 Nov 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 02 Nov 2026 12:30:00 +0000

Type Values Removed Values Added
First Time appeared Mediatek
Mediatek mediatek Chipset
Mediatek, Inc.
Mediatek, Inc. mediatek Chipset
Vendors & Products Mediatek
Mediatek mediatek Chipset
Mediatek, Inc.
Mediatek, Inc. mediatek Chipset

Mon, 02 Nov 2026 04:00:00 +0000

Type Values Removed Values Added
Title Privilege Escalation via Permissions Bypass in MediaTek Modem

Mon, 02 Nov 2026 02:45:00 +0000

Type Values Removed Values Added
Description In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege (EoP) if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09608864 / ALPS09327759; Issue ID: MSV-2958.
Weaknesses CWE-732
References
cve-icon MITRE

Status: PUBLISHED

Assigner: MediaTek

Published: 2026-11-02T02:34:24.893Z

Updated: 2026-11-03T04:55:36.397Z

Reserved: 2026-07-31T12:06:56.244Z

Link: CVE-2026-68591

cve-icon Vulnrichment

Updated: 2026-11-02T14:47:17.356Z

cve-icon NVD

Status : Analyzed

Published: 2026-11-02T03:17:38.343

Modified: 2026-11-12T16:53:25.197

Link: CVE-2026-68591

cve-icon Redhat

No data.