Information Disclosure Vulnerability in MediaTek Products
CVE-2026-20488

4.4MEDIUM

Key Information:

Vendor

MediaTek
Status
Mediatek Chipset
Vendor
CVE Published:
3 August 2026

What is CVE-2026-20488?

A vulnerability exists in certain MediaTek products that enables potential local information disclosure due to a missing bounds check in the display functionality. This issue could allow an unauthorized individual who has already obtained system privileges to expose sensitive information. Notably, user interaction is not necessary for exploitation, which could lead to serious security risks if not addressed. An official patch has been released to mitigate this vulnerability.

Affected Version(s)

MediaTek chipset MT6991

MediaTek chipset MT6993

MediaTek chipset MT8126

References

https://www.mediatek.com/product-security-bulletin/August...

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.