Privilege Escalation Vulnerability in MediaTek Modem
CVE-2026-20599

Currently unrated

Key Information:

Vendor

MediaTek

Vendor
CVE Published:
2 November 2026

What is CVE-2026-20599?

A security vulnerability in MediaTek Modems allows for local escalation of privileges due to a missing permission check. This flaw can be exploited by malicious actors who have already obtained system privileges without requiring user interaction. The vulnerability highlights the importance of ensuring proper permission checks to protect against unauthorized access and potential exploitation of system resources. A patch is available under Patch ID: MOLY01790985 and Issue ID: MSV-8148.

Affected Version(s)

MediaTek chipset MT2716

MediaTek chipset MT2735

MediaTek chipset MT2737

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.