CVE-2026-20589
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
33/100
Published: 2026-10-05
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
High
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606.
Weakness Classification (1)
Affected Software (36)
| Vendor | Product | Version |
|---|---|---|
| MediaTek, Inc. | MediaTek chipset | MT6768 |
| MediaTek, Inc. | MediaTek chipset | MT6769 |
| MediaTek, Inc. | MediaTek chipset | MT6789 |
| MediaTek, Inc. | MediaTek chipset | MT6833 |
| MediaTek, Inc. | MediaTek chipset | MT6855 |
| MediaTek, Inc. | MediaTek chipset | MT6877 |
| MediaTek, Inc. | MediaTek chipset | MT8771 |
| MediaTek, Inc. | MediaTek chipset | MT8781 |
| MediaTek, Inc. | MediaTek chipset | MT8781X |
| MediaTek, Inc. | MediaTek chipset | MT8786 |
| MediaTek, Inc. | MediaTek chipset | MT8791T |
| mediatek | mt2718_firmware | - |
| mediatek | mt6768_firmware | - |
| mediatek | mt6769_firmware | - |
| mediatek | mt6789_firmware | - |
| mediatek | mt6833_firmware | - |
| mediatek | mt6855_firmware | - |
| mediatek | mt6877_firmware | - |
| mediatek | mt8186_firmware | - |
| mediatek | mt8188_firmware | - |
| mediatek | mt8189_firmware | - |
| mediatek | mt8195_firmware | - |
| mediatek | mt8196_firmware | - |
| mediatek | mt8367_firmware | - |
| mediatek | mt8391_firmware | - |
| mediatek | mt8395_firmware | - |
| mediatek | mt8668_firmware | - |
| mediatek | mt8676_firmware | - |
| mediatek | mt8678_firmware | - |
| mediatek | mt8696_firmware | - |
Showing 30 of 36 entries