CVE-2026-20544

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-05 · updated 2026-10-09
Weakness: CWE-787

Description

In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.

Affected products

Mediatek Mt6739 Firmware: all versions
Mediatek Mt6761 Firmware: all versions
Mediatek Mt6765 Firmware: all versions
Mediatek Mt6768 Firmware: all versions
Mediatek Mt6769 Firmware: all versions
Mediatek Mt6781 Firmware: all versions
Mediatek Mt6789 Firmware: all versions
Mediatek Mt6835 Firmware: all versions
Mediatek Mt6853 Firmware: all versions
Mediatek Mt6855 Firmware: all versions
Mediatek Mt6858 Firmware: all versions
Mediatek Mt6877 Firmware: all versions
Mediatek Mt6878 Firmware: all versions
Mediatek Mt6879 Firmware: all versions
Mediatek Mt6881 Firmware: all versions
Mediatek Mt6883 Firmware: all versions
Mediatek Mt6885 Firmware: all versions
Mediatek Mt6886 Firmware: all versions
Mediatek Mt6889 Firmware: all versions
Mediatek Mt6893 Firmware: all versions
Mediatek Mt6895 Firmware: all versions
Mediatek Mt6897 Firmware: all versions
Mediatek Mt6899 Firmware: all versions
Mediatek Mt6983 Firmware: all versions
Mediatek Mt6985 Firmware: all versions
Mediatek Mt6989 Firmware: all versions
Mediatek Mt6991 Firmware: all versions
Mediatek Mt6993 Firmware: all versions
Mediatek Mt8126 Firmware: all versions
Mediatek Mt8171 Firmware: all versions

References

https://www.mediatek.com/product-security-bulletin/October-2026

Get alerted when CVE-2026-20544 or the next vulnerability affects your stack