CVE-2026-20491

MediumCVSS 5.5/10Last modified Oct 23, 2026

Description

In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981478 (Note: For MT6890, MT6990, MT6988) / AUTO00851173 (Note: For MT2735, MT2737); Issue ID: MSV-7652.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Aug 3, 2026
Last modified
Oct 23, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-204925.5In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with UserCVE-2026-204934.4In wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious acCVE-2026-204945.5In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a maliciouCVE-2026-204957.8In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privileCVE-2026-204964.4In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malCVE-2026-204976.0In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a mCVE-2026-204986.0In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilegCVE-2026-20507.8GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute CVE-2026-205005.5In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution CVE-2026-205018.4In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no addCVE-2026-205028.4In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addCVE-2026-205035.3In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected
CVE-2026-20491: Medium severity, CVSS 5.5 | Vulnix