Skip to content
OpenAdvisories
Medium · 6.7 CVE-2026-20462 EUVD-2026-40875GHSA-39rh-f5c6-gchq

In Telephony, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of privilege if a ma…

Published Jul 1, 2026 · Updated Jul 2, 2026 · Assigned by MediaTek

Description

In Telephony, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11006447; Issue ID: MSV-7871.

Affected products

VendorProductAffectedFixed
MediaTek MediaTek chipset MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6853, MT6855, MT6877, MT6883, MT6885, MT6889, MT6893, MT8695, MT8696, MT8765, MT8766, MT8766R, MT8768, MT8781, MT8791 —

References