Skip to content
OpenAdvisories
Medium · 6.7 CVE-2026-20588 EUVD-2026-92197GHSA-xxc4-28wg-vmv2

In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a m…

Published Oct 5, 2026 · Updated Oct 30, 2026 · Assigned by MediaTek

Description

In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607.

Affected products

VendorProductAffectedFixed
MediaTek MediaTek chipset MT6768, MT6769, MT6789, MT6833, MT6855, MT6877, MT8771, MT8781, MT8781X, MT8786, MT8791T —

References