Volerion logoVolerion
Volerion logoVolerion

MediaTek Modem Out-of-Bounds Write Vulnerability Allowing Remote Privilege Escalation

Vulnerability

A high-severity out-of-bounds write vulnerability has been identified in the modem component of certain MediaTek chipsets. This issue arises from a missing bounds check, which could potentially lead to remote privilege escalation. Exploitation of this vulnerability requires user interaction and occurs when a user equipment (UE) connects to a rogue base station controlled by an attacker.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation on the affected device.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.

Added: Apr 7, 2026, 4:20 AM
Updated: Apr 7, 2026, 4:20 AM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
5.0
exploitability
3.8
remediation
7.7
relevance
5.4
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.