6.1
Moyenne
CVE-2026-20466 In sec boot, there is a possible escalation of privilege due to a heap buffer overflow
Description
In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: AUTO00845351 (Note: For MT2737) / ALPS11072643 (Note: For MT6880, MT6890, MT6990); Issue ID: MSV-6929.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MediaTek chipset | Versions non publiées |
Autres CVE de MediaTek chipset
Les 230 CVE de MediaTek chipset →
CVE-2026-68591
In Modem, there is a possible escalation of privilege due to a permissions bypass
6.7
Moyenne
CVE-2026-68590
In ip_stack, there is a possible out of bounds read due to improper input validation
5.3
Moyenne
CVE-2026-68589
In Modem, there is a possible out of bounds write due to a missing bounds check
6.7
Moyenne
CVE-2026-68588
In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow
5.3
Moyenne