Out of Bounds Write Vulnerability in MediaTek Modem

CVE-2026-20556

What is CVE-2026-20556?

A vulnerability exists in MediaTek Modem that allows for an out of bounds write due to a missing bounds check. This flaw can be exploited remotely if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation does not require user interaction, raising significant security concerns. The vulnerability could enable the attacker to escalate privileges without needing additional execution rights. Affected users should implement available patches to mitigate risks.

References