Out of Bounds Write Vulnerability in Modem by MediaTek

CVE-2026-20566

What is CVE-2026-20566?

In MediaTek's modem, a serious out of bounds write vulnerability occurs due to a failure to perform proper bounds checks. This flaw can be exploited by an attacker to cause a remote denial of service, particularly when a user equipment (UE) connects to a maliciously controlled base station. Successful exploitation requires the attacker to have gained system-level privileges and user interaction is necessary for initiating the attack. It's crucial for users to stay informed and apply any available patches to mitigate this risk.

References