Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-20552 EUVD-2026-115017GHSA-mjqg-35qw-pc3j

In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additio…

Published Nov 2, 2026 · Updated Nov 2, 2026 · Assigned by MediaTek

Description

In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11523478 (Note: For MT6880, MT6890) / ALPS11297423 (Note: For MT6813, MT6986, MT6982, MT6980D) / AUTO00864897 (Note: For MT2735, MT2737); Issue ID: MSV-10724.

Affected products

VendorProductAffectedFixed
MediaTek MediaTek chipset MT2735, MT2737, MT6813, MT6880, MT6890, MT6980D, MT6982, MT6986, MT6988, MT6990 —

References