Out of Bounds Read Vulnerability in MediaTek Modem Product

CVE-2026-20555

What is CVE-2026-20555?

A vulnerability exists in MediaTek modems that allows for a potential out of bounds read due to a lack of proper bounds checking. This flaw could be exploited by an attacker using a rogue base station to establish a connection with a user equipment (UE). The exploit does not require any special execution privileges or user interaction, which increases the risk of remote denial of service. Ensuring proper boundaries and applying the necessary security patches is crucial to mitigate this risk.

References