Out of Bounds Write Vulnerability in Mediatek Modem

CVE-2026-20433

What is CVE-2026-20433?

A vulnerability has been identified in Mediatek's Modem, attributed to a missing bounds check that permits an out of bounds write. This flaw potentially allows remote escalation of privilege when a user device connects to a rogue base station controlled by an attacker. Although user interaction is necessary for exploitation, it poses significant security risks if unaddressed. A patch has been issued to mitigate this issue (Patch ID: MOLY01088681; Issue ID: MSV-4460).

References