AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MediaTekCVE-2026-20476

MediaTek chipset: out-of-bounds read

MediaTek

CVE-2026-20476 · Published Aug 3, 2026 · updated Aug 19, 2026

Medium5.5
No fix yet
MediaTek advisory

In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981532; Issue ID: MSV-7660.

Affected versions

PackageAffectedFixed in
MediaTek chipset
Product
<= MT6813No fix yet
<= MT6986No fix yet
<= MT6988No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-787

More MediaTek advisories

All MediaTek
Medium 6.0Aug 3MediaTek chipset: privilege escalationCVE-2026-20498no fix yetMedium 4.4Aug 3MediaTek chipset: out-of-bounds readCVE-2026-20490no fix yetMedium 5.5Aug 3MediaTek chipset: out-of-bounds writeCVE-2026-20491no fix yetMedium 5.5Aug 3MediaTek chipset: race conditionCVE-2026-20492no fix yetMedium 4.4Aug 3MediaTek chipset: out-of-bounds writeCVE-2026-20493no fix yetMedium 5.5Aug 3MediaTek chipset: out-of-bounds readCVE-2026-20494no fix yet