Information Disclosure Vulnerability in Telephony by MediaTek

CVE-2026-20470

What is CVE-2026-20470?

In MediaTek's Telephony, there exists a vulnerability that may allow unauthorized access to sensitive data due to a lack of necessary permission checks. This flaw can enable local information disclosure without requiring any user interaction or additional execution privileges, potentially compromising user data. Immediate attention and patching are advisable to mitigate potential risks associated with this vulnerability. For further details, refer to MediaTek's product security bulletin.

References