Public vulnerability disclosure
CVE-2026-20550
CVE-2026-20550
publishedCWE-787
In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11309816; Issue ID: MSV-10731.
Technical severityUnscoredNo score in collected sources
Published2026-11-02Source updated 2026-11-02
Collected2026-11-021 attributed source
Fixes and workarounds
No remediation reported in collected sources.
Missing remediation information is not evidence that no patch exists.
Affected products and versions
| Product | Versions | Authority |
|---|---|---|
| MediaTek chipset MediaTek, Inc. |
MT2735 (affected) MT2737 (affected) MT6880 (affected) MT6890 (affected) MT6980D (affected) MT6982 (affected) MT6986 (affected) MT6988 (affected) MT6990 (affected) Other versions: unaffected |
CNA: MediaTek |
Version ranges are source assertions. Check the vendor advisory and your installed configuration before determining exposure.
CVSS assessments
No CVSS assessment reported. An unscored record is not a low-severity determination.
Exploit evidence
No exploit evidence in collected sources. This is not proof of no exploitation.