CVE-2026-20541: CWE-126 Buffer Over-read in MediaTek, Inc. MediaTek chipset

This vulnerability (CWE-126) involves an out-of-bounds read in the modem of MediaTek chipsets due to a missing permission check. An attacker operating a rogue base station can exploit this flaw to remotely trigger a denial of service condition on connected UE devices. The issue does not require user interaction or elevated privileges to exploit. The vendor has assigned Patch ID MOLY01774038 and Issue ID MSV-8911 to this vulnerability.

Successful exploitation results in a remote denial of service on affected devices connected to a malicious base station. There is no indication of privilege escalation or data compromise. No user interaction is needed, increasing the risk of impact in environments where rogue base stations may be encountered.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vendor has assigned a patch ID, suggesting a fix may be available or in development. Until official patches are applied, avoid connecting to untrusted or suspicious base stations to reduce exposure.