Information Disclosure Vulnerability in MediaTek Modem Products

CVE-2026-20578

What is CVE-2026-20578?

An information disclosure vulnerability exists in MediaTek modem products, enabling attackers to obtain sensitive information through side channel attacks. This flaw allows for potential exploitation without requiring user interaction, particularly when a user equipment (UE) connects to a rogue base station. Such an attack could lead to remote denial of service, posing significant threats to data privacy and integrity. The issue has been identified under Patch ID: MOLY01879164, and responsible actions including applying the security patch are essential to mitigate risks.

References