ByteOS Network

CVE Vulnerability Details :

CVE-2026-20424

PUBLISHED

More Info Official Page

Assigner-MediaTek

Assigner Org ID-ee979b05-11f8-4f25-a7e0-a1fa9c190374

Published At-02 Mar, 2026 | 08:39

Updated At-02 Mar, 2026 | 13:57

▼CVE Numbering Authority (CNA)

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5540.

Affected Products

Vendor

MediaTek Inc.

Product

MT6991, MT6993, MT8196, MT8678, MT8793

Versions

Affected

Android 15.0, 16.0

Problem Types

Type	CWE ID	Description
CWE	CWE-125	CWE-125 Out-of-bounds Read

Type: CWE

CWE ID: CWE-125

Description: CWE-125 Out-of-bounds Read

References

Hyperlink	Resource
https://corp.mediatek.com/product-security-bulletin/March-2026	N/A

Hyperlink: https://corp.mediatek.com/product-security-bulletin/March-2026

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Metrics

Version	Base score	Base severity	Vector
3.1	4.4	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Version: 3.1

Base score: 4.4

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References