Type Confusion Vulnerability in Mediatek's MTee Product

CVE-2026-20587

What is CVE-2026-20587?

A type confusion vulnerability exists in Mediatek's MTee product, allowing a malicious actor with System privilege to escalate their access without requiring user interaction. This escalation of privilege could grant unauthorized access to sensitive areas of the system, potentially leading to further exploitation or compromise.

References