4.6
Medium
CVE-2026-20471 In DA, there is a possible out of bounds write due to a missing bounds check
Description
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10991588 (Note: For MT6880, MT6890, MT6990, MT6988, MT6986, MT6813) / AUTO00851171 (Note: For MT2735, MT2737); Issue ID: MSV-7790.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MediaTek chipset | Versions not published |
Other CVEs of MediaTek chipset
The 230 CVEs of MediaTek chipset →
CVE-2026-68591
In Modem, there is a possible escalation of privilege due to a permissions bypass
6.7
Medium
CVE-2026-68590
In ip_stack, there is a possible out of bounds read due to improper input validation
5.3
Medium
CVE-2026-68589
In Modem, there is a possible out of bounds write due to a missing bounds check
6.7
Medium
CVE-2026-68588
In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow
5.3
Medium