CVE-2026-20543: Medium severity MediaTek Modem vulnerability

Published Oct 5, 2026

Updated

In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-6761.

Affected Software

1 affected component

MediaTek Modem

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch MOLY01645293

Event History

Oct 5, 2026

CVE Published

via MITRE·01:40 AM

Data Sourced

via MITRE·01:40 AM

DescriptionWeakness

Data Sourced

via NVD·02:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Exploitation is local and does not require additional execution privileges. No user interaction is needed.

What identifiers can be used to track the vendor fix?

MediaTek identifies the fix as Patch ID MOLY01645293 and Issue ID MSV-6761.