Zurück zur CVE-Übersicht
CVE-2026-20586
HIGH(8.8)CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Risk Signal Score22/100 — NIEDRIG
- CVSS 8.8 — Hoch
Erwähnungen (letzte 60 Tage)
Artikel
EPSS-Score
0.4%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
8.8
Technische Schwere
Beschreibung
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614.
Betroffene Produkte
- cpe:2.3:o:mediatek:mt8910_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt2718_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6768_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6789_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6769_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6833_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6855_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6877_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8186_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8188_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8189_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8195_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8196_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8367_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8391_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8395_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8668_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8676_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8678_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt8696_firmware:-:*:*:*:*:*:*:*