CVE-2026-20544
Summary
| CVE | CVE-2026-20544 |
|---|---|
| State | PUBLISHED |
| Assigner | MediaTek |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-10-05 02:16:53 UTC |
| Updated | 2026-10-09 17:34:57 UTC |
| Description | In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935. |
Risk And Classification
Primary CVSS: v3.1 6.8 MEDIUM from ADP
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.001660000 probability, percentile 0.053770000 (date 2026-10-11)
Problem Types: CWE-787 | CWE-787 CWE-787 Out-of-bounds Write
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | ADP | DECLARED | 6.8 | MEDIUM | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary | 6.8 | MEDIUM | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
CVSS v3.1 Breakdown
Attack Vector
PhysicalAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Mediatek | Mt6739 | - | All | All | All |
| Operating System | Mediatek | Mt6739 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6761 | - | All | All | All |
| Operating System | Mediatek | Mt6761 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6765 | - | All | All | All |
| Operating System | Mediatek | Mt6765 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6768 | - | All | All | All |
| Operating System | Mediatek | Mt6768 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6769 | - | All | All | All |
| Operating System | Mediatek | Mt6769 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6781 | - | All | All | All |
| Operating System | Mediatek | Mt6781 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6789 | - | All | All | All |
| Operating System | Mediatek | Mt6789 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6835 | - | All | All | All |
| Operating System | Mediatek | Mt6835 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6853 | - | All | All | All |
| Operating System | Mediatek | Mt6853 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6855 | - | All | All | All |
| Operating System | Mediatek | Mt6855 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6858 | - | All | All | All |
| Operating System | Mediatek | Mt6858 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6877 | - | All | All | All |
| Operating System | Mediatek | Mt6877 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6878 | - | All | All | All |
| Operating System | Mediatek | Mt6878 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6879 | - | All | All | All |
| Operating System | Mediatek | Mt6879 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6881 | - | All | All | All |
| Operating System | Mediatek | Mt6881 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6883 | - | All | All | All |
| Operating System | Mediatek | Mt6883 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6885 | - | All | All | All |
| Operating System | Mediatek | Mt6885 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6886 | - | All | All | All |
| Operating System | Mediatek | Mt6886 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6889 | - | All | All | All |
| Operating System | Mediatek | Mt6889 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6893 | - | All | All | All |
| Operating System | Mediatek | Mt6893 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6895 | - | All | All | All |
| Operating System | Mediatek | Mt6895 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6897 | - | All | All | All |
| Operating System | Mediatek | Mt6897 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6899 | - | All | All | All |
| Operating System | Mediatek | Mt6899 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6983 | - | All | All | All |
| Operating System | Mediatek | Mt6983 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6985 | - | All | All | All |
| Operating System | Mediatek | Mt6985 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6989 | - | All | All | All |
| Operating System | Mediatek | Mt6989 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6991 | - | All | All | All |
| Operating System | Mediatek | Mt6991 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt6993 | - | All | All | All |
| Operating System | Mediatek | Mt6993 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8126 | - | All | All | All |
| Operating System | Mediatek | Mt8126 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8171 | - | All | All | All |
| Operating System | Mediatek | Mt8171 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8188 | - | All | All | All |
| Operating System | Mediatek | Mt8188 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8189 | - | All | All | All |
| Operating System | Mediatek | Mt8189 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8195 | - | All | All | All |
| Operating System | Mediatek | Mt8195 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8196 | - | All | All | All |
| Operating System | Mediatek | Mt8196 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8367 | - | All | All | All |
| Operating System | Mediatek | Mt8367 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8370 | - | All | All | All |
| Operating System | Mediatek | Mt8370 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8390 | - | All | All | All |
| Operating System | Mediatek | Mt8390 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8391 | - | All | All | All |
| Operating System | Mediatek | Mt8391 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8668 | - | All | All | All |
| Operating System | Mediatek | Mt8668 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8676 | - | All | All | All |
| Operating System | Mediatek | Mt8676 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8678 | - | All | All | All |
| Operating System | Mediatek | Mt8678 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8755 | - | All | All | All |
| Operating System | Mediatek | Mt8755 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8766 | - | All | All | All |
| Operating System | Mediatek | Mt8766 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8768 | - | All | All | All |
| Operating System | Mediatek | Mt8768 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8775 | - | All | All | All |
| Operating System | Mediatek | Mt8775 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8781 | - | All | All | All |
| Operating System | Mediatek | Mt8781 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8786 | - | All | All | All |
| Operating System | Mediatek | Mt8786 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8788 | - | All | All | All |
| Operating System | Mediatek | Mt8788 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8791 | - | All | All | All |
| Operating System | Mediatek | Mt8791 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8792 | - | All | All | All |
| Operating System | Mediatek | Mt8792 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8793 | - | All | All | All |
| Operating System | Mediatek | Mt8793 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8798 | - | All | All | All |
| Operating System | Mediatek | Mt8798 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8799 | - | All | All | All |
| Operating System | Mediatek | Mt8799 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8863 | - | All | All | All |
| Operating System | Mediatek | Mt8863 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8873 | - | All | All | All |
| Operating System | Mediatek | Mt8873 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8875 | - | All | All | All |
| Operating System | Mediatek | Mt8875 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8883 | - | All | All | All |
| Operating System | Mediatek | Mt8883 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8893 | - | All | All | All |
| Operating System | Mediatek | Mt8893 Firmware | - | All | All | All |
| Hardware | Mediatek | Mt8910 | - | All | All | All |
| Operating System | Mediatek | Mt8910 Firmware | - | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6739 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6761 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6765 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6768 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6769 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6781 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6789 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6835 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6853 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6855 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6858 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6877 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6878 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6879 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6881 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6883 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6885 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6886 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6889 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6893 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6895 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6897 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6899 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6983 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6985 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6989 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6991 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT6993 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8126 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8171 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8188 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8189 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8195 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8196 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8367 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8370 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8390 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8391 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8668 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8676 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8678 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8755 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8766 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8768 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8775 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8781 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8786 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8788 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8791 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8792 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8793 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8798 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8799 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8863 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8873 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8875 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8883 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8893 | Not specified |
| CNA | MediaTek Inc. | MediaTek Chipset | affected MT8910 | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.mediatek.com/product-security-bulletin/October-2026 | [email protected] | www.mediatek.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.