Heap Buffer Overflow Vulnerability in Mediatek Modem

CVE-2026-20449

What is CVE-2026-20449?

A vulnerability in Mediatek Modem allows attackers to exploit a heap buffer overflow, potentially leading to a system crash. This can occur when a user equipment (UE) connects to a compromised base station controlled by an attacker. Notably, the exploit does not require user interaction or additional execution privileges, making it particularly concerning for device security. Affected systems may face remote denial of service, which necessitates immediate attention to ensure protection from unauthorized access and potential disruptions.

References