Denial of Service Vulnerability in Modem by MediaTek

CVE-2026-20457

What is CVE-2026-20457?

A vulnerability in MediaTek's Modem allows for potential system crashes due to improper input validation. An attacker could exploit this weakness by connecting to a user equipment (UE) from a rogue base station. This exploitation does not require any execution privileges or user interaction, making it a significant concern for users. Patch ID MOLY01826924 addresses this issue to enhance security. For further details, visit the MediaTek security bulletin.

References