Bluetooth Driver Permission Bypass in MediaTek Products

CVE-2026-20495

What is CVE-2026-20495?

A vulnerability has been identified in the Bluetooth driver of MediaTek products that allows for a potential permission bypass. This issue stems from a missing check on permissions, enabling local escalation of privilege using only user execution privileges. Notably, exploitation does not require any user interaction, which raises significant security concerns for affected systems. Users are prompted to apply the necessary patches to mitigate this risk.

References