CVE-2026-20534: MediaTek Modem vulnerability
In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01797547; Issue ID: MSV-9155.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch MOLY01797547
Event History
Frequently Asked Questions
What conditions are required for exploitation?
A UE must connect to a rogue base station controlled by the attacker. No additional execution privileges or user interaction are required.
Who is realistically exposed to this issue?
Devices using the affected MediaTek Modem component may be exposed when they can be induced to connect to an attacker-controlled rogue base station.
What is the impact of successful exploitation?
Successful exploitation can cause a remote denial of service through an out-of-bounds read in the modem.
How can I identify the vendor's fix?
The listed patch identifier is MOLY01797547, and the associated issue identifier is MSV-9155.