← Database

CVE-2026-20435

MEDIUM CVSS: 4.6 Published: 2026-03-02 Modified: 2026-06-17

Description

In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10607099; Issue ID: MSV-6118.

Affected Platforms

Mediatek Mt6855Mediatek Mt6989Mediatek Mt6878Mediatek Mt6897Mediatek Mt6993Mediatek Mt6739Mediatek Mt6893Mediatek Mt6983Mediatek Mt6789Google Android

Weakness Type

CWE-522

References