Veille CVE
CVE-2026-20544
6.8 MoyenneDescription
In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.
Produits concernés
- MediaTek, Inc. MediaTek chipset
- Mediatek mt8910 firmware
- Mediatek mt6739 firmware
- Mediatek mt6761 firmware
- Mediatek mt6765 firmware
- Mediatek mt6768 firmware
- Mediatek mt6769 firmware
- Mediatek mt6781 firmware
- Mediatek mt6789 firmware
- Mediatek mt6835 firmware
- Mediatek mt6853 firmware
- Mediatek mt6855 firmware
- Mediatek mt6858 firmware
- Mediatek mt6877 firmware
- Mediatek mt6878 firmware
- Mediatek mt6879 firmware
- Mediatek mt6881 firmware
- Mediatek mt6883 firmware
- Mediatek mt6885 firmware
- Mediatek mt6886 firmware
- Mediatek mt6889 firmware
- Mediatek mt6893 firmware
- Mediatek mt6895 firmware
- Mediatek mt6897 firmware
- Mediatek mt6899 firmware
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 6.8 Moyenne | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Faiblesses (CWE)
Références
- https://www.mediatek.com/product-security-bulletin/October-2026 Vendor Advisory