Loading vulnerability…
Remote Privilege Escalation in MediaTek Modem
CVE-2026-20547 is a critical out-of-bounds write vulnerability in MediaTek modem components caused by a missing bounds check. An attacker controlling a rogue base station can potentially exploit the flaw when user equipment connects to that station, resulting in remote privilege escalation. Exploitation requires neither additional execution privileges nor user interaction. The affected function and exact firmware versions are not specified.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation could allow an attacker controlling a rogue base station to remotely escalate privileges on connected user equipment through modem memory corruption. The resulting privilege level and whether exploitation permits access beyond the modem subsystem are not specified. MediaTek reports no known active exploitation of this vulnerability.
If you can’t patch tonight, do this now.
No vulnerability-specific temporary mitigation or workaround is specified. Vendor firmware updates are the recommended corrective action.
Patch, then assume compromise.
Install device-manufacturer firmware updates incorporating MediaTek fixes MOLY01874018 / MOLY01774038 for issue MSV-9802. The November 2026 Android security patch level 2026-11-05 addresses the relevant critical MediaTek modem vulnerabilities; apply that patch level or a later applicable update and verify device-specific coverage with the manufacturer. Exact fixed modem firmware versions are not specified.
No public exploits tracked yet. Mallory keeps watching.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.