CVE-2026-20543: CWE-215 Insertion of Sensitive Information Into Debugging Code in MediaTek, Inc. MediaTek chipset

This vulnerability (CVE-2026-20543) involves a logic error in the modem component of various MediaTek chipsets that results in the insertion of sensitive information into debugging code, leading to local information disclosure. Exploitation does not require elevated privileges or user interaction. The affected products include a wide range of MediaTek chipset models identified by their model numbers. There is no CVSS score available, and no known active exploits have been reported. Patch information is referenced by Patch ID MOLY01645293 and Issue ID MSV-6761, but no explicit patch availability or vendor advisory details are provided.

The vulnerability could lead to local disclosure of sensitive information on affected MediaTek chipsets. Since no additional privileges or user interaction are required, an attacker with local access could potentially obtain sensitive data. There is no indication of remote exploitation or privilege escalation. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vendor has assigned a Patch ID (MOLY01645293) and Issue ID (MSV-6761), which suggests a fix may exist or is in development. Users and administrators should monitor MediaTek's official advisories for patch availability and apply updates once released.