CVE-2026-20563Not scored
MediaTek, Inc. MediaTek chipset vulnerability
MediaTek, Inc. · MediaTek chipset
Not in CISA KEV
No EPSS score yet. The score appears once FIRST publishes it.
Not scored yet. NVD has not published a CVSS score.
DescriptionNVD
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01777997; Issue ID: MSV-8905.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 2 Nov.
- MediaTek patches 57 flaws, including six critical modem bugsSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.