← Back

CVE-2026-20491

nvd nist
Published: Aug 3, 2026Modified: Aug 19, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981478 (Note: For MT6890, MT6990, MT6988) / AUTO00851173 (Note: For MT2735, MT2737); Issue ID: MSV-7652.

Affected (5)

Mediatek
5 products
Mt2735 Firmware
Mt2737 Firmware
Mt6890 Firmware
Mt6988 Firmware
Mt6990 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mt2735 Firmware
All versions
Running on/withPlatform Versions
Mediatek
Mt2735
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mt2737 Firmware
All versions
Running on/withPlatform Versions
Mediatek
Mt2737
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mt6890 Firmware
All versions
Running on/withPlatform Versions
Mediatek
Mt6890
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mt6988 Firmware
All versions
Running on/withPlatform Versions
Mediatek
Mt6988
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mt6990 Firmware
All versions
Running on/withPlatform Versions
Mediatek
Mt6990
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (1)

Source: security@mediatek.com
Vendor Advisory

Timeline

No history available yet.