CVE-2026-20446

MEDIUM CVSS 4.3 View on NVD ↗

Description

In sec boot, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service, if an attacker has physical access to the device, with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09963054; Issue ID: MSV-3899.

CVSS Vector

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

mediatek/mt6813 mediatek/mt6813_firmware

References

https://corp.mediatek.com/product-security-bulletin/April-2026

Published: Apr 07, 2026 04:17 UTC Modified: Apr 07, 2026 15:43 UTC