Information Disclosure Vulnerability in MediaTek Products

CVE-2026-20488

What is CVE-2026-20488?

A vulnerability exists in certain MediaTek products that enables potential local information disclosure due to a missing bounds check in the display functionality. This issue could allow an unauthorized individual who has already obtained system privileges to expose sensitive information. Notably, user interaction is not necessary for exploitation, which could lead to serious security risks if not addressed. An official patch has been released to mitigate this vulnerability.

References