Out of Bounds Write Vulnerability in Mediatek Sec Boot

CVE-2026-20446

What is CVE-2026-20446?

The vulnerability in Mediatek's sec boot involves a possible out of bounds write caused by an integer overflow during the boot process. If an attacker gains physical access to the device, they can exploit this vulnerability to cause a local denial of service. User execution privileges are required for exploitation, meaning that no additional user interaction is necessary for the attack to be carried out. For more details, refer to the Mediatek product security bulletin.

References