CVE-2026-20430

This vulnerability allows an attacker with system privileges to gain even higher privileges on devices using the MediaTek NB-IoT SDK, potentially giving them more control over the system. The attacker does not need any user interaction to exploit this flaw, but they must already have access to the system.

This vulnerability allows an attacker to gain higher privileges on a device by exploiting a flaw in the modem, but it requires the victim to connect to a malicious base station set up by the attacker. User interaction is necessary for the attack to succeed, meaning the victim must unknowingly connect to the rogue network.

This vulnerability allows an attacker to gain higher privileges on a device using the Mediatek nbiot SDK, potentially letting them execute unauthorized actions. While the attacker needs to have user access to the device, they do not need any interaction from the user to exploit this flaw.