Out of Bounds Write Vulnerability in MediaTek Modem

CVE-2026-20561

What is CVE-2026-20561?

The vulnerability in MediaTek's modem arises from a missing bounds check, which can result in an out of bounds write condition. Exploitation of this flaw may allow an attacker to cause a remote denial of service by tricking a user equipment (UE) device into connecting to a rogue base station. Importantly, no additional execution privileges are required for an attacker to exploit this vulnerability, and user interaction is unnecessary for the attack to succeed. A patch has been issued under ID MOLY01750090.

References