medium5.5
CVE-2026-20494
In wifi, there is a possible out of bounds read due to a missing bounds check.
Impact
In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10960006 / BORA00155314, BORA00155001, BORA00154907; Issue ID: MSV-7570.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediatek | Mt6890 Firmware | All versions |
| Mediatek | Mt6988 Firmware | All versions |
| Mediatek | Mt6990 Firmware | All versions |