CVE-2026-20543
Received Received - Intake

Information Disclosure in Modem Due to Logic Error

Publication date: 2026-10-05

Last updated on: 2026-10-05

Assigner: MediaTek, Inc.

Description
In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01645293; Issue ID: MSV-6761.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-05
Last Modified
2026-10-05
Generated
2026-10-05
AI Q&A
2026-10-05
EPSS Evaluated
N/A
NVD
CVE-2026-20543
EUVD
EUVD-2026-92180

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mediatek modem *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-215 The product inserts sensitive information into debugging code, which could expose this information if the debugging code is not disabled in production.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Mediatek modem allows local information disclosure due to a logic error. Exploitation requires no additional execution privileges or user interaction, making it accessible to attackers with local access.

Impact Analysis

An attacker could exploit this to disclose sensitive information stored or processed by the modem. Since no special privileges are needed, it may affect users with local access to the device, potentially leading to privacy breaches.

Compliance Impact

This vulnerability could lead to unauthorized disclosure of personal or sensitive data, violating GDPR and HIPAA requirements for data protection. Organizations may face compliance penalties if exploited.

Mitigation Strategies

Apply the patch identified as MOLY01645293 to address the logic error causing information disclosure. Ensure the modem firmware is updated to the latest version provided by Mediatek.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-20543. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart