Logic Error in Modem Leading to Remote Denial of Service by MediaTek
CVE-2026-20600

Currently unrated

Key Information:

Vendor

MediaTek
Status
Mediatek Chipset
Vendor
CVE Published:
2 November 2026

What is CVE-2026-20600?

A logic error in MediaTek's modem could lead to a crash of the application when impacted by a rogue base station. This vulnerability enables attackers to disrupt service remotely without requiring any execution privileges or user interaction, posing significant risks to connected devices. Affected users are encouraged to update to patch ID MOLY01416152 to mitigate potential denial of service attacks.

Affected Version(s)

MediaTek chipset MT2716

MediaTek chipset MT6835

MediaTek chipset MT6858

References

https://www.mediatek.com/product-security-bulletin/Novemb...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.