VulnerabilityAnalyzed
CVE-2026-20544
In meta, there is a possible out of bounds write due to a missing bounds check.
MEDIUM 6.8EPSS 0.17%
Does this matter?
Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own.
Description
In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.
- CVSS 3.1
- 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.17% probability · 6th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- mediatek/mt8910 firmware · mediatek/mt6739 firmware · mediatek/mt6761 firmware · mediatek/mt6765 firmware · mediatek/mt6768 firmware · mediatek/mt6769 firmware · mediatek/mt6781 firmware · mediatek/mt6789 firmware · mediatek/mt6835 firmware · mediatek/mt6853 firmware · mediatek/mt6855 firmware · mediatek/mt6858 firmware · mediatek/mt6877 firmware · mediatek/mt6878 firmware · mediatek/mt6879 firmware · mediatek/mt6881 firmware · mediatek/mt6883 firmware · mediatek/mt6885 firmware · mediatek/mt6886 firmware · mediatek/mt6889 firmware · +39 more
- Source
- security@mediatek.com
EPSS moved from 0.2% on 5 October 2026 to 0.2% on 26 October 2026.
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.