What’s Vulnerable › Vulnerabilities

CVE-2026-20491

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-03 · updated 2026-10-23
• Weakness: CWE-787

Description

In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981478 (Note: For MT6890, MT6990, MT6988) / AUTO00851173 (Note: For MT2735, MT2737); Issue ID: MSV-7652.

Affected products

• Mediatek Mt2735 Firmware: all versions
• Mediatek Mt2737 Firmware: all versions
• Mediatek Mt6890 Firmware: all versions
• Mediatek Mt6988 Firmware: all versions
• Mediatek Mt6990 Firmware: all versions

References

• https://www.mediatek.com/product-security-bulletin/August-2026

Get alerted when CVE-2026-20491 or the next vulnerability affects your stack