CVE-2026-20488

4.4 Moyenne

Publiée le 03/08/2026 à 05:16 · Modifiée le 19/08/2026 à 18:47 · Analysée par le NVD · Source : security@mediatek.com

Description

In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757.

Traduire en français

Produits concernés

MediaTek, Inc. MediaTek chipset
Mediatek mt6991 firmware
Mediatek mt6993 firmware
Mediatek mt8126 firmware
Mediatek mt8171 firmware
Mediatek mt8188 firmware
Mediatek mt8189 firmware
Mediatek mt8367 firmware
Mediatek mt8668 firmware
Mediatek mt8676 firmware
Mediatek mt8678 firmware
Mediatek mt8766 firmware
Mediatek mt8768 firmware
Mediatek mt8781 firmware
Mediatek mt8786 firmware
Mediatek mt8791t firmware
Mediatek mt8799 firmware
Mediatek mt8910 firmware

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.4 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N`

Faiblesses (CWE)

CWE-125

Références

https://www.mediatek.com/product-security-bulletin/August-2026 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories