Out of Bounds Read Vulnerability in Modem by MediaTek
CVE-2026-20534

5.3MEDIUM

Key Information:

Vendor

MediaTek
Status
Mediatek Chipset
Vendor
CVE Published:
5 October 2026

What is CVE-2026-20534?

A vulnerability in MediaTek's modem products allows for an out of bounds read due to insufficient bounds checks. This flaw can enable remote attackers to trigger a denial of service by connecting to a compromised base station without requiring any additional execution privileges. Exploitation of this vulnerability does not necessitate user interaction, making it a significant security risk for users of affected devices.

Affected Version(s)

MediaTek chipset MT2716

MediaTek chipset MT2735

MediaTek chipset MT2737

References

https://www.mediatek.com/product-security-bulletin/Octobe...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.