VYPR
← All advisories
Medium severity4.6NVD Advisory· Published Mar 2, 2026· Updated Jun 17, 2026

CVE-2026-20435

CVE-2026-20435

Description

In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10607099; Issue ID: MSV-6118.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Linux Foundation/Yocto
    cpe:2.3:a:linuxfoundation:yocto:4.0:*:*:*:*:*:*:*
  • Rdkcentral/Rdk B2 versions
    cpe:2.3:a:rdkcentral:rdk-b:2022q3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:rdkcentral:rdk-b:2022q3:*:*:*:*:*:*:*
    • cpe:2.3:a:rdkcentral:rdk-b:2024q1:*:*:*:*:*:*:*
  • Google/Android3 versions
    cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:16.0:-:*:*:*:*:*:*
  • Openwrt/Openwrt2 versions
    cpe:2.3:o:openwrt:openwrt:21.02.0:-:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:openwrt:openwrt:21.02.0:-:*:*:*:*:*:*
    • cpe:2.3:o:openwrt:openwrt:23.05.0:-:*:*:*:*:*:*
  • Zephyrproject Rtos/Zephyr
    cpe:2.3:o:zephyrproject:zephyr:3.7.0:-:*:*:*:*:*:*
  • Mediatek/preloaderllm-fuzzy
  • MediaTek, Inc./MediaTek chipsetv5
    Range: MT2737

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.