CVE-2026-20419 Details
Description
In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461663 / WCNCR00463309; Issue ID: MSV-4852.
A denial-of-service vulnerability has been identified in the WLAN access point and station firmware of certain MediaTek chipsets. This issue arises from an uncaught exception, which can cause the system to become unresponsive. The vulnerability can be exploited remotely, without the need for additional execution privileges or user interaction.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://corp.mediatek.com/product-security-bulletin/February-2026 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-754 | Improper Check for Unusual or Exceptional Conditions | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| mediatek nbiot sdk | <= 3.6 |
CPE
Remediation
| |
| mediatek software development kit | <= 7.6.7.2 |
CPE
Remediation
| |
| mediatek mt6890 | All versions |
CPE
Remediation
| |
| mediatek mt6989tb | All versions |
CPE
Remediation
| |
| mediatek mt7902 | All versions |
CPE
Remediation
| |
| mediatek mt7915 | All versions |
CPE
Remediation
| |
| mediatek mt7916 | All versions |
CPE
Remediation
| |
| mediatek mt7920 | All versions |
CPE
Remediation
| |
| mediatek mt7921 | All versions |
CPE
Remediation
| |
| mediatek mt7922 | All versions |
CPE
Remediation
| |
| mediatek mt7925 | All versions |
CPE
Remediation
| |
| mediatek mt7927 | All versions |
CPE
Remediation
| |
| mediatek mt7981 | All versions |
CPE
Remediation
| |
| mediatek mt7986 | All versions |
CPE
Remediation
| |
| mediatek mt8196 | All versions |
CPE
Remediation
| |
| mediatek mt8668 | All versions |
CPE
Remediation
| |
| mediatek mt8676 | All versions |
CPE
Remediation
| |
| mediatek mt8678 | All versions |
CPE
Remediation
| |
| mediatek mt8775 | All versions |
CPE
Remediation
| |
| mediatek mt8791t | All versions |
CPE
Remediation
| |
| mediatek mt8792 | All versions |
CPE
Remediation
| |
| mediatek mt8793 | All versions |
CPE
Remediation
| |
| mediatek mt8796 | All versions |
CPE
Remediation
| |
| mediatek mt8873 | All versions |
CPE
Remediation
| |
| mediatek mt8883 | All versions |
CPE
Remediation
| |
| mediatek mt8893 | All versions |
CPE
Remediation
| |
| mediatek mt8910 | All versions |
CPE
Remediation
| |
| openwrt openwrt | 19.07.0 - 21.02.0 - |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Feb 5, 2026 | CVE Modified | CISA-ADP |
| Feb 3, 2026 | Initial Analysis | [email protected] |
| Feb 2, 2026 | CVE Modified | CISA-ADP |
| Feb 2, 2026 | New CVE Received | [email protected] |