CVE-2026-20466CWE-787

CVE-2026-20466

Medium · published August 3, 2026

CVSS v3.1
6.1
EPSS
0%
Percentile
5.5
In the wild
Unconfirmed
What it is

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: AUTO00845351 (Note: For MT2737) / ALPS11072643 (Note: For MT6880, MT6890, MT6990); Issue ID: MSV-6929.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00166 · 5.5th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-08-03T07:16Z
References (1)
https://www.mediatek.com/product-security-bulletin/August-2026 · [email protected]
EPSS history
Timeline
  • 03 AUG 02:05Z
    In sec boot, there is a possible escalation of privilege due to a heap buffer overflow
    cvelistv5