Vulnerability intelligence
CVE-2026-20519
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778993; Issue ID: MSV-8898.
CVSS Score
—
Unrated
EPSS — Exploit Probability
—
Awaiting FIRST.org data · checked 2026-10-05
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
1 article across 1 outlet · first covered Oct 5, 2026 · latest Oct 5, 2026
Coverage timeline
-
MediaTek Patches Critical Modem Flaws Enabling Rogue Base Station Attackssecurityonline.info · Oct 5, 2026