Public vulnerability disclosure
CVE-2026-20576
CVE-2026-20576
publishedCWE-191
In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431385; Issue ID: MSV-9920.
Technical severityUnscoredNo score in collected sources
Published2026-11-02Source updated 2026-11-02
Collected2026-11-021 attributed source
Fixes and workarounds
No remediation reported in collected sources.
Missing remediation information is not evidence that no patch exists.
Affected products and versions
| Product | Versions | Authority |
|---|---|---|
| MediaTek chipset MediaTek, Inc. |
MT6789 (affected) MT6835 (affected) MT6855 (affected) MT6858 (affected) MT6877 (affected) MT6885 (affected) MT6886 (affected) MT6895 (affected) MT6897 (affected) MT6985 (affected) MT6988 (affected) MT6989 (affected) MT6991 (affected) MT6993 (affected) Other versions: unaffected |
CNA: MediaTek |
Version ranges are source assertions. Check the vendor advisory and your installed configuration before determining exposure.
CVSS assessments
No CVSS assessment reported. An unscored record is not a low-severity determination.
Exploit evidence
No exploit evidence in collected sources. This is not proof of no exploitation.