Skip to content
OpenAdvisories
High · 7.8 CVE-2026-20495 EUVD-2026-52085GHSA-854r-9p65-g453

In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privil…

Published Aug 3, 2026 · Updated Aug 5, 2026 · Assigned by MediaTek

Description

In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00488300; Issue ID: MSV-7296.

Affected products

VendorProductAffectedFixed
MediaTek MediaTek chipset MT7902, MT7920, MT7921, MT7922, MT7925, MT7927 —

References