6.1
Medium
CVE-2026-20466 In sec boot, there is a possible escalation of privilege due to a heap buffer overflow
Description
In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: AUTO00845351 (Note: For MT2737) / ALPS11072643 (Note: For MT6880, MT6890, MT6990); Issue ID: MSV-6929.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MediaTek chipset | Versions not published |
References
- www.mediatek.com www.mediatek.com
Timeline
- Published
- Last modified
Other CVEs of MediaTek chipset
The 230 CVEs of MediaTek chipset →
CVE-2026-68591
In Modem, there is a possible escalation of privilege due to a permissions bypass
6.7
Medium
CVE-2026-68590
In ip_stack, there is a possible out of bounds read due to improper input validation
5.3
Medium
CVE-2026-68589
In Modem, there is a possible out of bounds write due to a missing bounds check
6.7
Medium
CVE-2026-68588
In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow
5.3
Medium