Back to overview

CVE-2026-20462

Description
In Telephony, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11006447; Issue ID: MSV-7871.

Metadata

CVE ID
CVE-2026-20462
State
PUBLISHED
Assigner
MediaTek
Reserved
2025-11-03 01:30 UTC
Published
2026-07-01 03:14 UTC
Last updated
2026-07-01 03:14 UTC
Primary CWE
CWE-122
CWE-122 Heap Overflow
Vendor / Product
MediaTek, Inc. / MediaTek chipset
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (1)
VendorProductPlatformVersions
MediaTek, Inc. MediaTek chipset MT6739, MT6761, MT6765, MT6768 …
Weakness (CWE)
CWESourceDescription
CWE-122 cna CWE-122 Heap Overflow
Back to overview