Out of Bound Read Vulnerability in MediaTek Wi-Fi Products
CVE-2026-20494

Currently unrated

Key Information:

Vendor

MediaTek

Vendor
CVE Published:
3 August 2026

What is CVE-2026-20494?

A potential out of bounds read vulnerability exists in MediaTek's Wi-Fi products due to inadequate bounds checking. This flaw can be exploited by an attacker with system privileges, leading to unauthorized local information disclosure. Exploitation does not require user interaction, heightening the risk associated with this issue. Users are encouraged to apply the available patches (Patch ID: ALPS10960006) to safeguard their devices from these vulnerabilities.

Affected Version(s)

MediaTek chipset MT6890

MediaTek chipset MT6988

MediaTek chipset MT6990

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.