CVE-2026-20486

MEDIUM

MediaTek Chipset - Improper Check for Unusual or Exceptional Conditions

Title source: rule
STIX 2.1

Description

In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833.

Scores

CVSS v3 4.4
EPSS 0.0011
EPSS Percentile 1.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-754
Status published
Products (11)
MediaTek, Inc./MediaTek chipset MT2718
MediaTek, Inc./MediaTek chipset MT6878
MediaTek, Inc./MediaTek chipset MT6895
MediaTek, Inc./MediaTek chipset MT6991
MediaTek, Inc./MediaTek chipset MT6993
MediaTek, Inc./MediaTek chipset MT8370
MediaTek, Inc./MediaTek chipset MT8390
MediaTek, Inc./MediaTek chipset MT8395
MediaTek, Inc./MediaTek chipset MT8678
MediaTek, Inc./MediaTek chipset MT8799
... and 1 more
Published Aug 03, 2026
Tracked Since Aug 03, 2026