← Database

CVE-2026-20495

HIGH CVSS: 7.8 Published: 2026-08-03 Modified: 2026-08-19

Description

In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00488300; Issue ID: MSV-7296.

Affected Platforms

Mediatek Mt7920 FirmwareMediatek Mt7927 FirmwareMediatek Mt7927Mediatek Mt7922Mediatek Mt7902 FirmwareMediatek Mt7925Mediatek Mt7922 FirmwareMediatek Mt7925 FirmwareMediatek Mt7902Mediatek Mt7921 Firmware

Weakness Type

CWE-862

References