← Database

CVE-2026-20477

MEDIUM CVSS: 6.0 Published: 2026-08-03 Modified: 2026-08-19

Description

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658.

Affected Platforms

Mediatek Mt8678 FirmwareMediatek Mt6991Mediatek Mt6993Mediatek Mt8188 FirmwareMediatek Mt8668 FirmwareMediatek Mt8189Mediatek Mt6993 FirmwareMediatek Mt8676 FirmwareMediatek Mt8678Mediatek Mt8668

Weakness Type

CWE-787

References