CVE-2026-20466

MediumCVSS 6.1/10Last modified Oct 23, 2026

Description

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: AUTO00845351 (Note: For MT2737) / ALPS11072643 (Note: For MT6880, MT6890, MT6990); Issue ID: MSV-6929.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
MediaTek, Inc.MediaTek chipsetMT2737; MT6880; MT6890; MT6990

References

Timeline

Published
Aug 3, 2026
Last modified
Oct 23, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-204676.0In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a CVE-2026-204686.0In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege if a malicCVE-2026-204695.8In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privileCVE-2026-20477.8GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to executeCVE-2026-204706.2In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure CVE-2026-204714.6In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service, if an attacker hasCVE-2026-204724.4In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actCVE-2026-204736.0In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actCVE-2026-204746.0In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicCVE-2026-204756.0In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malCVE-2026-204765.5In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with User executioCVE-2026-204776.0In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a mal
CVE-2026-20466: Medium severity, CVSS 6.1 | Vulnix