CVE-2026-20486

6.7 Moyenne

Publiée le 03/08/2026 à 05:16 · Modifiée le 19/08/2026 à 18:48 · Analysée par le NVD · Source : security@mediatek.com

Description

In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833.

Traduire en français

Produits concernés

MediaTek, Inc. MediaTek chipset
Mediatek mt8910 firmware
Mediatek mt2718 firmware
Mediatek mt6878 firmware
Mediatek mt6895 firmware
Mediatek mt6991 firmware
Mediatek mt6993 firmware
Mediatek mt8370 firmware
Mediatek mt8390 firmware
Mediatek mt8395 firmware
Mediatek mt8678 firmware
Mediatek mt8799 firmware

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.7 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-754

Références

https://www.mediatek.com/product-security-bulletin/August-2026 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories