Out of Bounds Write Vulnerability in MediaTek Modem

CVE-2026-20585

What is CVE-2026-20585?

In MediaTek's modem firmware, a vulnerability exists that allows for an out of bounds write due to a lack of proper bounds checking. This issue can be exploited remotely by an attacker controlling a rogue base station, enabling escalation of privileges without requiring any user interaction. It is crucial for users of affected modem firmware to apply the patch identified as MOLY01338165 to mitigate this risk.

References