Skip to content
6.7 Medium

CVE-2026-20410 In imgsys, there is a possible out of bounds write due to a missing bounds check

Description

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10362552; Issue ID: MSV-5760.

Affected products and versions

Product Affected versions Fixed in
MT6897, MT6989, MT8370, MT8390, MT8395 Versions not published
MT6897 Versions not published
MT6989 Versions not published
MT8370 Versions not published
MT8390 Versions not published
MT8395 Versions not published
MediaTek chipset Versions not published

References

Timeline

  1. Published
  2. Last modified
Track this CVE