CVE-2026-20477 Details
Description
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658.
A vulnerability has been identified in the display component of certain MediaTek chipsets, where a missing bounds check can lead to an out-of-bounds write. This flaw has the potential to be exploited for local privilege escalation, but requires the attacker to have already obtained system privileges. The issue affects multiple chipsets, including MT6991, MT6993, MT8188, MT8189, MT8668, MT8676, MT8678, MT8766, MT8768, MT8781, MT8786, MT8791T, MT8799, and MT8910.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.mediatek.com/product-security-bulletin/August-2026 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| mediatek mt8910 firmware | All versions |
CPE
Remediation
| |
| mediatek mt8910 | All versions |
CPE
Remediation
| |
| mediatek mt6991 firmware | All versions |
CPE
Remediation
| |
| mediatek mt6991 | All versions |
CPE
Remediation
| |
| mediatek mt6993 firmware | All versions |
CPE
Remediation
| |
| mediatek mt6993 | All versions |
CPE
Remediation
| |
| mediatek mt8188 firmware | All versions |
CPE
Remediation
| |
| mediatek mt8188 | All versions |
CPE
Remediation
| |
| mediatek mt8189 firmware | All versions |
CPE
Remediation
| |
| mediatek mt8189 | All versions |
CPE
Remediation
| |
| mediatek mt8668 firmware | All versions |
CPE
Remediation
| |
| mediatek mt8668 | All versions |
CPE
Remediation
| |
| mediatek mt8676 firmware | All versions |
CPE
Remediation
| |
| mediatek mt8676 | All versions |
CPE
Remediation
| |
| mediatek mt8678 firmware | All versions |
CPE
Remediation
| |
| mediatek mt8678 | All versions |
CPE
Remediation
| |
| mediatek mt8781 firmware | All versions |
CPE
Remediation
| |
| mediatek mt8781 | All versions |
CPE
Remediation
| |
| mediatek mt8799 firmware | All versions |
CPE
Remediation
| |
| mediatek mt8799 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 19, 2026 | Initial Analysis | [email protected] |
| Aug 5, 2026 | CVE Modified | CISA-ADP |
| Aug 3, 2026 | CVE Modified | CISA-ADP |
| Aug 3, 2026 | New CVE Received | [email protected] |