Out of Bounds Write Vulnerability in MediaTek Modem

CVE-2026-20432

What is CVE-2026-20432?

In MediaTek's modem, a possible out of bounds write vulnerability exists due to insufficient bounds checking. This flaw could enable an attacker to escalate privileges remotely by exploiting a user equipment (UE) connected to a rogue base station they control. The exploitation requires user interaction, making awareness and caution essential for affected users. Patch ID: MOLY01406170; Issue ID: MSV-4461.

References