Remote Privilege Escalation Risk in MediaTek Modem Products

CVE-2026-20557

What is CVE-2026-20557?

A significant vulnerability has been identified in MediaTek's modem products, which allows for possible out-of-bounds write due to the absence of a proper bounds check. This flaw could enable an attacker to escalate privileges remotely if a user equipment (UE) device connects to a rogue base station controlled by the attacker. Notably, exploitation of this vulnerability does not require user interaction, raising serious security concerns for affected users.

References