Out of Bound Read Vulnerability in MediaTek Wi-Fi Products
CVE-2026-20494

5.5MEDIUM

Key Information:

Vendor

MediaTek
Status
Mediatek Chipset
Vendor
CVE Published:
3 August 2026

What is CVE-2026-20494?

A potential out of bounds read vulnerability exists in MediaTek's Wi-Fi products due to inadequate bounds checking. This flaw can be exploited by an attacker with system privileges, leading to unauthorized local information disclosure. Exploitation does not require user interaction, heightening the risk associated with this issue. Users are encouraged to apply the available patches (Patch ID: ALPS10960006) to safeguard their devices from these vulnerabilities.

Affected Version(s)

MediaTek chipset MT6890

MediaTek chipset MT6988

MediaTek chipset MT6990

References

https://www.mediatek.com/product-security-bulletin/August...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.