MediaTek, Inc. MediaTek chipset

CVE-2026-20550
MEDIUM 6.2

At a glance

Source
CVE.org
State
PUBLISHED
Published
Updated
Assigner
MediaTek

Description

In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11309816; Issue ID: MSV-10731.

Weaknesses (CWE)

  • CWE-787 — Out-of-bounds Write

References

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 6.2CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCISA-ADP

European references

Affected products

ProductVersions
MediaTek, Inc. · MediaTek chipsetaffected MT2735 ; affected MT2737 ; affected MT6880 ; affected MT6890 ; affected MT6980D ; affected MT6982

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
ENISA EUVDENISA — reproduction authorised, source acknowledged