MediaTek Modem Out-of-Bounds Write Vulnerability Leading to Privilege Escalation

Vulnerability

A high-severity out-of-bounds write vulnerability has been identified in the Modem component of certain MediaTek chipsets. This issue arises from a missing bounds check, which could allow remote privilege escalation if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation of this vulnerability requires user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation on the affected device.

Remediation

MediaTek has issued a patch for this vulnerability, which can be applied by device manufacturers. Instructions for applying the patch are available through MediaTek's official channels.

Added: Mar 2, 2026, 9:32 AM
Updated: Mar 2, 2026, 2:33 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
3.8
remediation
0.0
relevance
3.4
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.