medium6.7
CVE-2026-20588
In mtee, there is a possible escalation of privilege due to a missing bounds check.
Impact
In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediatek | Mt2718 Firmware | All versions |
| Mediatek | Mt6768 Firmware | All versions |
| Mediatek | Mt6769 Firmware | All versions |
| Mediatek | Mt6789 Firmware | All versions |
| Mediatek | Mt6833 Firmware | All versions |
| Mediatek | Mt6855 Firmware | All versions |
| Mediatek | Mt6877 Firmware | All versions |
| Mediatek | Mt8186 Firmware | All versions |
| Mediatek | Mt8188 Firmware | All versions |
| Mediatek | Mt8189 Firmware | All versions |
| Mediatek | Mt8195 Firmware | All versions |
| Mediatek | Mt8196 Firmware | All versions |