Denial of Service Vulnerability in Modem by MediaTek

CVE-2026-20560

What is CVE-2026-20560?

A vulnerability has been identified in MediaTek's Modem that could lead to a system crash caused by improper input validation. This flaw allows attackers to trigger a remote denial of service when a user equipment (UE) connects to a rogue base station, requiring no special execution privileges or user interaction for exploitation. This issue can compromise system stability and availability, emphasizing the importance of applying updates to protect against such threats.

References