Out of Bounds Read Vulnerability in Mediatek Modem

CVE-2026-20598

What is CVE-2026-20598?

In Mediatek's modem, a vulnerability exists that could potentially allow for an out of bounds read due to an integer overflow. This vulnerability can be exploited when a user equipment (UE) connects to a malicious base station controlled by an attacker, resulting in a remote denial of service. The exploitation does not require any additional execution privileges or user interaction, making it particularly insidious. It is crucial for users and administrators to apply the available patch to mitigate this risk.

References