Vulnerability allows hackers to pull data off phone without even powering it on

Privacy & Security
1

Hi,
I’m wondering when the Kompakt will receive security updates to patch the vulnerability in the MediaTek chip it uses. Link here to the CVE: NVD - CVE-2026-20435
A hacker doesn’t even need to know the passcode to get into the phone to exploit this CVE.

Thanks!

4 Likes
2

@calamity_k Thank you for reaching out. I will ask our team about this and come back when they respond.

2 Likes
3

Hi @urszula. Any progress on this?

3 Likes
4

@calamity_k Unfortunately no :frowning: I will ping them again.

5

Physically secure your phone.

This is not an issue unique to Mudita. ‘if an attacker has physical access to the device’

There is a patch also.

1 Like
6

It is not clear from the article, exactly what data could be accessed through this exploit.
It appears that physical access to the device is required.
Personally I store nothing on the Kompakt that would be an issue if the privacy were to be breached. But I would like to know exactly what data could be accessed, so the actual risk can be established.