5.5 Medium

CVE-2026-20415 In imgsys, there is a possible memory corruption due to improper locking

Description

In imgsys, there is a possible memory corruption due to improper locking. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10363254; Issue ID: MSV-5617.

Affected products and versions

Product	Affected versions	Fixed in
MT6897, MT6989	Versions not published
MT6897	Versions not published
MT6989	Versions not published
MediaTek chipset	Versions not published

The 2 CVEs of MT6897, MT6989 →

CVE-2026-20409 In imgsys, there is a possible out of bounds write due to a missing bounds check 7.8 High

Do you use MT6897, MT6989?

Track this CVE Watch MT6897, MT6989 Check my SBOMs

www.cveye.io/en/cve/CVE-2026-20415

Timeline

Published February 2, 2026
Last modified March 30, 2026

References

corp.mediatek.com corp.mediatek.com

Track this CVE

CVE-2026-20415 In imgsys, there is a possible memory corruption due to improper locking

Description

Affected products and versions

Other CVEs of MT6897, MT6989