Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Medium | 6.7 | CVE-2026-20528 |
In ccci, there is a possible out of bounds write and read due to a missing bounds check
MediaTek, Inc.MediaTek, Inc. MediaTek chipset, MediaTek, Inc. Mt6880 Firmware, MediaTek, Inc. Mt2735 Firmware, MediaTek, Inc. Mt2737 Firmware, MediaTek, Inc. Mt6813 Firmware, MediaTek, Inc. Mt6986 Firmware, MediaTek, Inc. Mt6988 Firmware, MediaTek, Inc. Mt6890 Firmware, MediaTek, Inc. Mt6980D Firmware, MediaTek, Inc. Mt6986D Firmware, MediaTek, Inc. Mt6990 Firmware
|
NVD | |||
|
CVE-2026-20528In ccci, there is a possible out of bounds write and read due to a missing bounds check
From the advisoryIn ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, crashes, or privilege escalation if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS11428950 (Note: For MT6880, MT6890) / ALPS10563453 (Note: For MT6980D, MT6990, MT6986, MT6986D, MT6813, MT6988) / AUTO00858766 (Note: For MT2735, MT2737); Issue ID: MSV-9893. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H AffectsMediaTek, Inc.MediaTek, Inc. MediaTek chipsetMediaTek, Inc. Mt6880 FirmwareMediaTek, Inc. Mt2735 FirmwareMediaTek, Inc. Mt2737 FirmwareMediaTek, Inc. Mt6813 FirmwareMediaTek, Inc. Mt6986 FirmwareMediaTek, Inc. Mt6988 FirmwareMediaTek, Inc. Mt6890 FirmwareMediaTek, Inc. Mt6980D FirmwareMediaTek, Inc. Mt6986D FirmwareMediaTek, Inc. Mt6990 Firmware
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||