Out of Bounds Read Vulnerability in Mediatek Modem

CVE-2026-20597

What is CVE-2026-20597?

A vulnerability exists in Mediatek's modem that can lead to an out of bounds read due to insufficient boundary checks. This flaw can be exploited when a user equipment (UE) connects to a malicious base station controlled by an attacker. Such an attack does not require any execution privileges nor user interaction, posing a significant risk of remote denial of service. It is essential for users to apply security patches available from Mediatek to mitigate this risk.

References