Medium severity6.0NVD Advisory· Published Aug 3, 2026· Updated Aug 19, 2026
CVE-2026-20477
CVE-2026-20477
Description
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11cpe:2.3:o:mediatek:mt8910_firmware:-:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:mediatek:mt8910_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8188_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8678_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6991_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6993_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8189_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8668_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8676_firmware:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:mediatek:mt8676_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8781_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8799_firmware:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.mediatek.com/product-security-bulletin/August-2026nvdVendor Advisory
News mentions
0No linked articles in our index yet.