CVE-2026-20496

4.4 Moyenne

Publiée le 03/08/2026 à 05:16 · Modifiée le 19/08/2026 à 17:08 · Analysée par le NVD · Source : security@mediatek.com

Description

In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11036877; Issue ID: MSV-7132.

Traduire en français

Produits concernés

MediaTek, Inc. MediaTek chipset
Mediatek mt6983 firmware
Mediatek mt8676 firmware
Mediatek mt8678 firmware
Mediatek mt8755 firmware
Mediatek mt8768 firmware
Mediatek mt8771 firmware
Mediatek mt8775 firmware
Mediatek mt8781 firmware
Mediatek mt8786 firmware
Mediatek mt8791t firmware
Mediatek mt8792 firmware
Mediatek mt8793 firmware
Mediatek mt8796 firmware
Mediatek mt8797 firmware
Mediatek mt8798 firmware
Mediatek mt8799 firmware
Mediatek mt8910 firmware

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.4 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-125

Références

https://www.mediatek.com/product-security-bulletin/August-2026 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories