medium4.4
CVE-2026-20484
In TFA, there is a possible information disclosure due to a missing permission check.
Impact
In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediatek | Mt8799 Firmware | All versions |
| Mediatek | Mt6739 Firmware | All versions |
| Mediatek | Mt6761 Firmware | All versions |
| Mediatek | Mt6765 Firmware | All versions |
| Mediatek | Mt6768 Firmware | All versions |
| Mediatek | Mt6781 Firmware | All versions |
| Mediatek | Mt6789 Firmware | All versions |
| Mediatek | Mt6833 Firmware | All versions |
| Mediatek | Mt6835 Firmware | All versions |
| Mediatek | Mt6853 Firmware | All versions |
| Mediatek | Mt6855 Firmware | All versions |
| Mediatek | Mt6877 Firmware | All versions |