AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MediaTekCVE-2026-20466

MediaTek chipset: privilege escalation

MediaTek

CVE-2026-20466 · Published Aug 3, 2026 · updated Aug 28, 2026

Medium6.1
No fix yet
MediaTek advisory

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: AUTO00845351 (Note: For MT2737) / ALPS11072643 (Note: For MT6880, MT6890, MT6990); Issue ID: MSV-6929.

Affected versions

PackageAffectedFixed in
MediaTek chipset
Product
<= MT2737No fix yet
<= MT6880No fix yet
<= MT6890No fix yet
<= MT6990No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-787

More MediaTek advisories

All MediaTek