Remote Privilege Escalation Vulnerability in MediaTek Modem

CVE-2026-20554

What is CVE-2026-20554?

A vulnerability exists in the MediaTek modem due to inadequate bounds checking, allowing for a potential system crash. This issue could enable an attacker to exploit a connection from a user equipment device to a malicious base station, leading to unauthorized privilege escalation without the need for elevated execution rights. User interaction is required for successful exploitation, highlighting the need for enhanced security measures when connecting to potentially rogue networks. MediaTek has identified Patch ID MOLY01911177 and Issue ID MSV-10122 to address this vulnerability.

References