6.4
Medium
CVE-2026-20438 In MAE, there is a possible out of bounds write due to a race condition
Description
In MAE, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431920; Issue ID: MSV-5835.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MT2718 | Versions not published | |
| MT6899 | Versions not published | |
| MT6991 | Versions not published | |
| MT8168 | Versions not published | |
| MT8169 | Versions not published | |
| MT8186 | Versions not published | |
| MT8188 | Versions not published | |
| MT8678 | Versions not published | |
| MT8695 | Versions not published |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| MT8696 | Versions not published | |
| MT8793 | Versions not published | |
| MediaTek chipset | Versions not published |
References
- corp.mediatek.com corp.mediatek.com
Timeline
- Published
- Last modified
Other CVEs of MT2718
The 10 CVEs of MT2718 →
CVE-2026-20441
In MAE, there is a possible out of bounds write due to a missing bounds check
6.7
Medium
CVE-2026-20440
In MAE, there is a possible out of bounds write due to a missing bounds check
6.7
Medium
CVE-2026-20439
In imgsys, there is a possible system crash due to use after free
4.4
Medium
CVE-2026-20437
In MAE, there is a possible system crash due to use after free
4.4
Medium