Integer Overflow Vulnerability in MediaTek Products

CVE-2026-20489

What is CVE-2026-20489?

A vulnerability exists in MediaTek products due to an integer overflow during display operations, which may allow local information disclosure. A malicious actor with System privilege can exploit this flaw without user interaction, potentially leading to unauthorized access to sensitive information. It is crucial for users of affected MediaTek systems to apply the patch identified as ALPS11004274 to mitigate the risks associated with this vulnerability.

References