Out of Bounds Read Vulnerability in MediaTek Modem Products
CVE-2026-20596

Currently unrated

Key Information:

Vendor

MediaTek

Vendor
CVE Published:
2 November 2026

What is CVE-2026-20596?

A vulnerability exists in MediaTek modems due to improper input validation, allowing for potential out of bounds read scenarios. This flaw can be exploited by an attacker controlling a rogue base station, leading to a remote denial of service condition. This exploitation does not require additional execution privileges and does not necessitate user interaction, posing a significant risk to connected devices. Users and organizations leveraging MediaTek modem technology should take immediate action to apply security patches and enhance their network defenses.

Affected Version(s)

MediaTek chipset MT2716

MediaTek chipset MT2735

MediaTek chipset MT2737

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.