CVE-2026-20456

5.5 Moyenne

Publiée le 01/06/2026 à 06:16 · Modifiée le 22/07/2026 à 09:10 · Analysée par le NVD · Source : security@mediatek.com

Description

In wlan STA driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480851; Issue ID: MSV-6338.

Traduire en français

Produits concernés

MediaTek, Inc. MediaTek chipset
Mediatek mt7902 firmware
Mediatek mt7920 firmware
Mediatek mt7921 firmware
Mediatek mt7922 firmware
Mediatek mt7925 firmware
Mediatek mt7927 firmware

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.5 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-787

Références

https://corp.mediatek.com/product-security-bulletin/June-2026 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories