CVE-2026-20476

MEDIUM

MediaTek Chipset - Out-of-bounds Write

Title source: rule

Description

In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981532; Issue ID: MSV-7660.

References (1)

Core 1

Core References

https://www.mediatek.com/product-security-bulletin/August-2026

Scores

CVSS v3 5.5

EPSS 0.0011

EPSS Percentile 1.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-787

Status published

Products (3)

MediaTek, Inc./MediaTek chipset MT6813

MediaTek, Inc./MediaTek chipset MT6986

MediaTek, Inc./MediaTek chipset MT6988

Published Aug 03, 2026

Tracked Since Aug 03, 2026