CVE-2026-20588

MEDIUM CVSS 3.1: 6.7 EPSS 0.11%
Updated Oct 09, 2026
Mediatek, Inc.
Parameter Value
CVSS 6.7 (MEDIUM)
Type CWE-787 (Out-of-bounds Write)
Vendor Mediatek, Inc.
Public PoC No

In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation.

Patch ID: ALPS11383899; Issue ID: MSV-9607.

Attack Parameters

Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Privileges Required
High
Admin privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service

CVSS Vector v3.1

Weakness Type (CWE)

Vulnerable Products 50

Configuration From (including) Up to (excluding)
Mediatek Mt2718_Firmware
cpe:2.3:o:mediatek:mt2718_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt2718
cpe:2.3:h:mediatek:mt2718:-:*:*:*:*:*:*:*
— —
Mediatek Mt6768_Firmware
cpe:2.3:o:mediatek:mt6768_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt6768
cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*
— —
Mediatek Mt6769_Firmware
cpe:2.3:o:mediatek:mt6769_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt6769
cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*
— —
Mediatek Mt6789_Firmware
cpe:2.3:o:mediatek:mt6789_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt6789
cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*
— —
Mediatek Mt6833_Firmware
cpe:2.3:o:mediatek:mt6833_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt6833
cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*
— —
Mediatek Mt6855_Firmware
cpe:2.3:o:mediatek:mt6855_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt6855
cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*
— —
Mediatek Mt6877_Firmware
cpe:2.3:o:mediatek:mt6877_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt6877
cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*
— —
Mediatek Mt8186_Firmware
cpe:2.3:o:mediatek:mt8186_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8186
cpe:2.3:h:mediatek:mt8186:-:*:*:*:*:*:*:*
— —
Mediatek Mt8188_Firmware
cpe:2.3:o:mediatek:mt8188_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8188
cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*
— —
Mediatek Mt8189_Firmware
cpe:2.3:o:mediatek:mt8189_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8189
cpe:2.3:h:mediatek:mt8189:-:*:*:*:*:*:*:*
— —
Mediatek Mt8195_Firmware
cpe:2.3:o:mediatek:mt8195_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8195
cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*
— —
Mediatek Mt8196_Firmware
cpe:2.3:o:mediatek:mt8196_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8196
cpe:2.3:h:mediatek:mt8196:-:*:*:*:*:*:*:*
— —
Mediatek Mt8367_Firmware
cpe:2.3:o:mediatek:mt8367_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8367
cpe:2.3:h:mediatek:mt8367:-:*:*:*:*:*:*:*
— —
Mediatek Mt8391_Firmware
cpe:2.3:o:mediatek:mt8391_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8391
cpe:2.3:h:mediatek:mt8391:-:*:*:*:*:*:*:*
— —
Mediatek Mt8395_Firmware
cpe:2.3:o:mediatek:mt8395_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8395
cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*
— —
Mediatek Mt8668_Firmware
cpe:2.3:o:mediatek:mt8668_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8668
cpe:2.3:h:mediatek:mt8668:-:*:*:*:*:*:*:*
— —
Mediatek Mt8676_Firmware
cpe:2.3:o:mediatek:mt8676_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8676
cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*
— —
Mediatek Mt8678_Firmware
cpe:2.3:o:mediatek:mt8678_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8678
cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*
— —
Mediatek Mt8696_Firmware
cpe:2.3:o:mediatek:mt8696_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8696
cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*
— —
Mediatek Mt8781_Firmware
cpe:2.3:o:mediatek:mt8781_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8781
cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*
— —
Mediatek Mt8788e_Firmware
cpe:2.3:o:mediatek:mt8788e_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8788e
cpe:2.3:h:mediatek:mt8788e:-:*:*:*:*:*:*:*
— —
Mediatek Mt8792_Firmware
cpe:2.3:o:mediatek:mt8792_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8792
cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*
— —
Mediatek Mt8793_Firmware
cpe:2.3:o:mediatek:mt8793_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8793
cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*
— —
Mediatek Mt8799_Firmware
cpe:2.3:o:mediatek:mt8799_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8799
cpe:2.3:h:mediatek:mt8799:-:*:*:*:*:*:*:*
— —
Mediatek Mt8910_Firmware
cpe:2.3:o:mediatek:mt8910_firmware:-:*:*:*:*:*:*:*
— —
Mediatek Mt8910
cpe:2.3:h:mediatek:mt8910:-:*:*:*:*:*:*:*
— —