Memory Corruption Vulnerability in MediaTek USB Products
CVE-2026-20584

Currently unrated

Key Information:

Vendor

MediaTek
Status
Mediatek Chipset
Vendor
CVE Published:
2 November 2026

What is CVE-2026-20584?

A vulnerability exists in MediaTek's USB products, arising from insufficient bounds checking which may lead to memory corruption. This flaw permits a malicious actor with system-level privileges to escalate privileges locally without requiring user interaction. To address this risk, it is crucial for users to apply the latest patches and follow best security practices accordingly.

Affected Version(s)

MediaTek chipset MT6739

MediaTek chipset MT6761

MediaTek chipset MT6765

References

https://www.mediatek.com/product-security-bulletin/Novemb...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.