CVE-2026-20491 — MediaTek, Inc. / MediaTek chipset

CVE-2026-20491

MediaTek, Inc. / MediaTek chipset PUBLISHED

Description (CNA)

In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981478 (Note: For MT6890, MT6990, MT6988) / AUTO00851173 (Note: For MT2735, MT2737); Issue ID: MSV-7652.

Affected (CNA)

Vendor / product	Versions
MediaTek, Inc. / MediaTek chipset	affected MT2735; affected MT2737; affected MT6890; affected MT6988; affected MT6990

CWE

CWE-787

References

https://www.mediatek.com/product-security-bulletin/August-2026

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.