CVE-2026-20499Not scored
MediaTek, Inc. MediaTek chipset vulnerability
MediaTek, Inc. · MediaTek chipset
Not in CISA KEV
No EPSS score yet. The score appears once FIRST publishes it.
Not scored yet. NVD has not published a CVSS score.
DescriptionNVD
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01857954; Issue ID: MSV-8247.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 2 Nov.
- MediaTek patches 57 flaws, including six critical modem bugsSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.