Out of Bounds Write Vulnerability in MediaTek Products

CVE-2026-20471

What is CVE-2026-20471?

A vulnerability exists in MediaTek chipsets due to a missing bounds check that allows for an out of bounds write. This flaw could enable a local attacker with physical access to the device to cause a denial of service. The exploitation of this vulnerability does not require any additional execution privileges or user interaction. MediaTek provides patches identified as ALPS10991588 and AUTO00851171 to mitigate this issue. It is crucial for users of the affected products to apply these patches to safeguard their devices.

References