{"id":"CVE-2026-20544","title":"In meta, there is a possible out of bounds write due to a missing bounds check","summary":"In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User inte…","severity":"none","cwe":["CWE-787"],"vendor":"MediaTek, Inc.","product":"MediaTek chipset","affected":["mediatek_chipset MT6739","mediatek_chipset MT6761","mediatek_chipset MT6765","mediatek_chipset MT6768","mediatek_chipset MT6769","mediatek_chipset MT6781","mediatek_chipset MT6789","mediatek_chipset MT6835","mediatek_chipset MT6853","mediatek_chipset MT6855","mediatek_chipset MT6858","mediatek_chipset MT6877","mediatek_chipset MT6878","mediatek_chipset MT6879","mediatek_chipset MT6881","mediatek_chipset MT6883","mediatek_chipset MT6885","mediatek_chipset MT6886","mediatek_chipset MT6889","mediatek_chipset MT6893","mediatek_chipset MT6895","mediatek_chipset MT6897","mediatek_chipset MT6899","mediatek_chipset MT6983","mediatek_chipset MT6985","mediatek_chipset MT6989","mediatek_chipset MT6991","mediatek_chipset MT6993","mediatek_chipset MT8126","mediatek_chipset MT8171","mediatek_chipset MT8188","mediatek_chipset MT8189","mediatek_chipset MT8195","mediatek_chipset MT8196","mediatek_chipset MT8367","mediatek_chipset MT8370","mediatek_chipset MT8390","mediatek_chipset MT8391","mediatek_chipset MT8668","mediatek_chipset MT8676","mediatek_chipset MT8678","mediatek_chipset MT8755","mediatek_chipset MT8766","mediatek_chipset MT8768","mediatek_chipset MT8775","mediatek_chipset MT8781","mediatek_chipset MT8786","mediatek_chipset MT8788","mediatek_chipset MT8791","mediatek_chipset MT8792"],"published":"2026-10-05","updated":"2026-10-05","sourceUpdated":"2026-10-05T02:16:53.560","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-20544","references":[{"url":"https://www.mediatek.com/product-security-bulletin/October-2026","label":"security@mediatek.com"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-10-05T02:10:36.191Z","slug":"CVE-2026-20544","body":"## Overview\n\nIn meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}