← Database

CVE-2026-20446

MEDIUM CVSS: 4.3 Published: 2026-04-07 Modified: 2026-06-17

Description

In sec boot, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service, if an attacker has physical access to the device, with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09963054; Issue ID: MSV-3899.

Affected Platforms

Mediatek Mt6813Mediatek Mt6813 Firmware

Weakness Type

CWE-787, CWE-190

References