Local Denial of Service Vulnerability in MediaTek USB Products
CVE-2026-20583

Currently unrated

Key Information:

Vendor

MediaTek
Status
Mediatek Chipset
Vendor
CVE Published:
2 November 2026

What is CVE-2026-20583?

A use after free vulnerability in MediaTek's USB driver could allow a malicious actor with system privileges to cause a local denial of service. This flaw does not require user interaction for exploitation, making it a severe concern for affected devices. For mitigation, it is advisable for users to apply the necessary patches as recommended by MediaTek, detailed in their product security bulletin.

Affected Version(s)

MediaTek chipset MT6739

MediaTek chipset MT6761

MediaTek chipset MT6765

References

https://www.mediatek.com/product-security-bulletin/Novemb...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.