5.5

CVE-2026-20491

In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981478 (Note: For MT6890, MT6990, MT6988) / AUTO00851173 (Note: For MT2735, MT2737); Issue ID: MSV-7652.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mediatek ≫ Mt2735 Firmware Version-
   Mediatek ≫ Mt2735 Version-
Mediatek ≫ Mt2737 Firmware Version-
   Mediatek ≫ Mt2737 Version-
Mediatek ≫ Mt6890 Firmware Version-
   Mediatek ≫ Mt6890 Version-
Mediatek ≫ Mt6988 Firmware Version-
   Mediatek ≫ Mt6988 Version-
Mediatek ≫ Mt6990 Firmware Version-
   Mediatek ≫ Mt6990 Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.1% 0.011
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.mediatek.com/product-security-bulletin/August-2026
Vendor Advisory