← Database

CVE-2026-20488

MEDIUM CVSS: 4.4 Published: 2026-08-03 Modified: 2026-08-19

Description

In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757.

Affected Platforms

Mediatek Mt8171Mediatek Mt8678 FirmwareMediatek Mt6991Mediatek Mt6993Mediatek Mt8768Mediatek Mt8188 FirmwareMediatek Mt8786Mediatek Mt8668 FirmwareMediatek Mt8126 FirmwareMediatek Mt8766

Weakness Type

CWE-125

References