6.7

CVE-2026-20486

In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
MediatekMt8910 Firmware Version-
   MediatekMt8910 Version-
MediatekMt2718 Firmware Version-
   MediatekMt2718 Version-
MediatekMt6878 Firmware Version-
   MediatekMt6878 Version-
MediatekMt6895 Firmware Version-
   MediatekMt6895 Version-
MediatekMt6991 Firmware Version-
   MediatekMt6991 Version-
MediatekMt6993 Firmware Version-
   MediatekMt6993 Version-
MediatekMt8370 Firmware Version-
   MediatekMt8370 Version-
MediatekMt8390 Firmware Version-
   MediatekMt8390 Version-
MediatekMt8395 Firmware Version-
   MediatekMt8395 Version-
MediatekMt8678 Firmware Version-
   MediatekMt8678 Version-
MediatekMt8799 Firmware Version-
   MediatekMt8799 Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.017
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

https://www.mediatek.com/product-security-bulletin/August-2026
Vendor Advisory