Out of Bounds Write Vulnerability in MediaTek Modem
CVE-2026-20565

Currently unrated

Key Information:

Vendor

MediaTek

Vendor
CVE Published:
2 November 2026

What is CVE-2026-20565?

MediaTek's modem software is vulnerable to an out of bounds write due to a flaw in bounds checking. This vulnerability allows an attacker to escalate privileges locally without requiring user interaction. The flaw can be exploited to gain unauthorized access or control over the system. A patch has been issued under ID MOLY01778991 to address this issue, and users are urged to update their firmware promptly to mitigate potential risks.

Affected Version(s)

MediaTek chipset MT2716

MediaTek chipset MT2735

MediaTek chipset MT2737

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.