CVE-2026-20491
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-08-03
Modified: 2026-10-23
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981478 (Note: For MT6890, MT6990, MT6988) / AUTO00851173 (Note: For MT2735, MT2737); Issue ID: MSV-7652.
Weakness Classification (1)
Affected Software (5)
| Vendor | Product | Version |
|---|---|---|
| mediatek | mt2735_firmware | - |
| mediatek | mt2737_firmware | - |
| mediatek | mt6890_firmware | - |
| mediatek | mt6988_firmware | - |
| mediatek | mt6990_firmware | - |
References & Advisories (1)
Vendor Advisory