March 17, 2026, 3:20 pm | Read time: 2 minutes
Users of Android smartphones with MediaTek processors should be particularly cautious right now. Security researchers have discovered a vulnerability that could bypass protection mechanisms and allow sensitive data to be read.
The potential scope of the problem is significant: According to statistics, MediaTek’s global market share is between approximately 21 and 34 percent. This means about one in four Android smartphones could be affected, or in the worst case, even one in three.
Attack via Preloader Possible
The vulnerability was discovered by the research team Donjon, which is part of the hardware wallet manufacturer Ledger. In a test with the Nothing CMF Phone 1, the experts were able to attack a smartphone in about 45 seconds, according to “ZDNet.” The cause is an error in the so-called Preloader. This system component starts before the actual operating system and prepares the hardware. Due to the error, basic protection mechanisms can be bypassed before they become active.
Access to Sensitive Data
The vulnerability is known under the identifier CVE-2026-20435. It allows access to security-relevant data such as PINs and cryptographic keys, which normally secure the smartphone’s encryption. Under certain conditions, attackers could bypass protection mechanisms if they have direct access to the device. This makes the flaw particularly critical for users who store a lot of private data on their smartphones.
Security Flaw in Bluetooth Headphones: Sony, Bose, JBL and Other Brands Affected
Critical Chip Security Flaws Threaten Numerous Smartphones
Primarily Affordable Devices Affected
MediaTek chips are often used in entry-level and mid-range smartphones. Therefore, devices in these price ranges are particularly at risk. More expensive smartphones usually rely on the manufacturers’ own processors or Qualcomm chips, making the vulnerability less relevant there. Users of affordable devices should be especially vigilant.
Also of interest: WhatsApp Status Soon Visible to Unknown Contacts
Updates Are Crucial
MediaTek has already released an update to close the security gap. To ensure all users are protected, smartphone manufacturers must first integrate the fix into their own firmware updates and distribute them to devices. Users should regularly check for available updates and install them immediately. Only then is the smartphone considered secure.