{"id":"CVE-2026-20544","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-20544","generatedAt":"2026-10-28T10:37:30.848Z","title":"In meta, there is a possible out of bounds write due to a missing bounds check.","description":"In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.","published":"2026-10-05T02:16:54.000Z","lastModified":"2026-10-09T17:34:58.000Z","status":"Analyzed","sourceIdentifier":"security@mediatek.com","cvss":{"version":"3.1","score":6.8,"severity":"MEDIUM","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-787"],"affected":["mediatek/mt8910 firmware","mediatek/mt6739 firmware","mediatek/mt6761 firmware","mediatek/mt6765 firmware","mediatek/mt6768 firmware","mediatek/mt6769 firmware","mediatek/mt6781 firmware","mediatek/mt6789 firmware","mediatek/mt6835 firmware","mediatek/mt6853 firmware","mediatek/mt6855 firmware","mediatek/mt6858 firmware","mediatek/mt6877 firmware","mediatek/mt6878 firmware","mediatek/mt6879 firmware","mediatek/mt6881 firmware","mediatek/mt6883 firmware","mediatek/mt6885 firmware","mediatek/mt6886 firmware","mediatek/mt6889 firmware","mediatek/mt6893 firmware","mediatek/mt6895 firmware","mediatek/mt6897 firmware","mediatek/mt6899 firmware","mediatek/mt6983 firmware","mediatek/mt6985 firmware","mediatek/mt6989 firmware","mediatek/mt6991 firmware","mediatek/mt6993 firmware","mediatek/mt8126 firmware","mediatek/mt8171 firmware","mediatek/mt8188 firmware","mediatek/mt8189 firmware","mediatek/mt8195 firmware","mediatek/mt8196 firmware","mediatek/mt8367 firmware","mediatek/mt8370 firmware","mediatek/mt8390 firmware","mediatek/mt8391 firmware","mediatek/mt8668 firmware","mediatek/mt8676 firmware","mediatek/mt8678 firmware","mediatek/mt8755 firmware","mediatek/mt8766 firmware","mediatek/mt8768 firmware","mediatek/mt8775 firmware","mediatek/mt8781 firmware","mediatek/mt8786 firmware","mediatek/mt8788 firmware","mediatek/mt8791 firmware","mediatek/mt8792 firmware","mediatek/mt8793 firmware","mediatek/mt8798 firmware","mediatek/mt8799 firmware","mediatek/mt8863 firmware","mediatek/mt8873 firmware","mediatek/mt8875 firmware","mediatek/mt8883 firmware","mediatek/mt8893 firmware"],"epss":{"score":0.00166,"percentile":0.0581,"date":"2026-10-27","history":[{"date":"2026-10-05","score":0.00166,"percentile":0.053}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own."},"changes":[{"kind":"scored","label":"Newly scored","at":"2026-10-05T12:15:08.000Z","detail":{"from":null,"score":"6.8","severity":"MEDIUM","fromSeverity":null},"summary":"Now scored CVSS 6.8 MEDIUM."},{"kind":"new","label":"New CVE","at":"2026-10-05T02:16:54.000Z","detail":{"score":null,"severity":null,"publishedAt":"2026-10-05T02:16:53.560Z"},"summary":"New CVE, medium severity (CVSS 6.8)."}],"references":[{"url":"https://www.mediatek.com/product-security-bulletin/October-2026","tags":["Vendor Advisory"],"source":"security@mediatek.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-20544","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}