In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607.
CVE-2026-20588
CVSS base score
6.7 (v3.1)
Severity
MEDIUM
Attack vector
Local
Weakness
CWE-787
Last modified
October 30, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
mediatek mt2718 firmware
mediatek mt6768 firmware
mediatek mt6769 firmware
mediatek mt6789 firmware
mediatek mt6833 firmware
mediatek mt6855 firmware
mediatek mt6877 firmware
mediatek mt8186 firmware
mediatek mt8188 firmware
mediatek mt8189 firmware
References
- www.mediatek.com Vendor Advisory