Integer Overflow Vulnerability in MediaTek Modem Affecting User Devices

CVE-2026-68588

What is CVE-2026-68588?

In MediaTek's modem technology, an integer overflow vulnerability has been identified, which could allow an attacker to exploit the modem by connecting a user device to a rogue base station. This exploitation could facilitate a remote denial of service without requiring any user interaction or additional execution privileges. Attackers can potentially disrupt the normal functioning of user devices connected to their compromised base station. Relevant patches for this issue have been identified as MOLY01334054 and MOLY01312486, corresponding to issue ID MSV-7920, ensuring that users are encouraged to apply these updates promptly to safeguard their devices.

References