Out of Bounds Read Vulnerability in MediaTek's ip_stack Product

CVE-2026-68590

What is CVE-2026-68590?

An out of bounds read vulnerability exists in MediaTek's ip_stack due to improper input validation. This flaw could be exploited to cause a remote denial of service, particularly if a user equipment (UE) connects to a malicious base station controlled by an attacker. Remarkably, this vulnerability does not require any additional execution privileges or user interaction for exploitation, making it particularly concerning for users. Affected deployments should be updated to patch ID MOLY01387180 to mitigate this issue.

References