Out of Bounds Read Vulnerability in MediaTek Modem Affects Connected Devices

CVE-2026-20594

What is CVE-2026-20594?

This vulnerability in MediaTek modems stems from a lack of proper bounds checking, which can lead to an out of bounds read condition. This flaw allows an attacker to potentially leverage a rogue base station they control to cause a remote denial of service. Notably, user interaction is not required for the exploitation of this vulnerability, making devices particularly susceptible. Affected users should promptly apply the available patches (ID: MOLY01349680 / MOLY01369097) to safeguard their devices from potential exploits.

References