CVE-2026-20471 — MediaTek, Inc. / MediaTek chipset

Description (CNA)

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10991588 (Note: For MT6880, MT6890, MT6990, MT6988, MT6986, MT6813) / AUTO00851171 (Note: For MT2735, MT2737); Issue ID: MSV-7790.

Affected (CNA)

Vendor / product	Versions
MediaTek, Inc. / MediaTek chipset	affected MT2735; affected MT2737; affected MT6813; affected MT6880; affected MT6890; affected MT6986; affected MT6988; affected MT6990

CWE

CWE-787

References

https://www.mediatek.com/product-security-bulletin/August-2026

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.