CVE-2026-20434
In Modem, there is a possible out of bounds write due to a missing bounds check.
Published Mar 2, 2026 · updated Jun 17, 2026 · mediatek lr12a
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY00782946; Issue ID: MSV-4135.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 2, 2026 · NIST NVD
Detected
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY00782946; Issue ID: MSV-4135.
Jun 17, 2026 · NIST NVD
Updated
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY00782946; Issue ID: MSV-4135.
Affected
- cpe mediatek/lr12aversion unspecified
- cpe mediatek/lr13version unspecified
- cpe mediatek/nr15version unspecified
- cpe mediatek/nr16version unspecified
- cpe mediatek/nr17version unspecified
Sources
- NIST NVDVulnerability recordCVE-2026-20434
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed
nvd.nist.gov