6

CVE-2026-20473

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
MediatekMt6991 Firmware Version-
   MediatekMt6991 Version-
MediatekMt8910 Firmware Version-
   MediatekMt8910 Version-
MediatekMt6993 Firmware Version-
   MediatekMt6993 Version-
MediatekMt8126 Firmware Version-
   MediatekMt8126 Version-
MediatekMt8171 Firmware Version-
   MediatekMt8171 Version-
MediatekMt8188 Firmware Version-
   MediatekMt8188 Version-
MediatekMt8189 Firmware Version-
   MediatekMt8189 Version-
MediatekMt8367 Firmware Version-
   MediatekMt8367 Version-
MediatekMt8668 Firmware Version-
   MediatekMt8668 Version-
MediatekMt8676 Firmware Version-
   MediatekMt8676 Version-
MediatekMt8678 Firmware Version-
   MediatekMt8678 Version-
MediatekMt8766 Firmware Version-
   MediatekMt8766 Version-
MediatekMt8768 Firmware Version-
   MediatekMt8768 Version-
MediatekMt8781 Firmware Version-
   MediatekMt8781 Version-
MediatekMt8786 Firmware Version-
   MediatekMt8786 Version-
MediatekMt8791t Firmware Version-
   MediatekMt8791t Version-
MediatekMt8799 Firmware Version-
   MediatekMt8799 Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.022
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 6 0.8 5.2
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://www.mediatek.com/product-security-bulletin/August-2026
Vendor Advisory