CVE-2026-20436

This vulnerability allows an attacker to gain higher privileges on a device by exploiting a flaw in the modem, but it requires the victim to connect to a malicious base station set up by the attacker. User interaction is necessary for the attack to succeed, meaning the victim must unknowingly connect to the rogue network.

This vulnerability allows an attacker to gain higher privileges on a device using MediaTek's software development kit, potentially letting them control the device without needing any special permissions. The attacker only needs to be nearby to exploit this flaw, and no user interaction is required.

This vulnerability allows an attacker to gain higher privileges on a device using the Mediatek nbiot SDK, potentially letting them execute unauthorized actions. While the attacker needs to have user access to the device, they do not need any interaction from the user to exploit this flaw.