CVE 6.7 MEDIUM

CVE-2026-20451_CVE-2026-20451

6.7 / 10
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504.

Basic Information

ID CVE-2026-20451
Source MediaTek
Published May 4, 2026 at 05:42
Modified May 4, 2026 at 12:55

Affected Product

Vendor MediaTek, Inc.
Product MediaTek chipset
Version MT2718
Affected Versions MediaTek, Inc. MediaTek chipset MT2718
MediaTek, Inc. MediaTek chipset MT6899
MediaTek, Inc. MediaTek chipset MT6985
MediaTek, Inc. MediaTek chipset MT6989
MediaTek, Inc. MediaTek chipset MT6991
MediaTek, Inc. MediaTek chipset MT8115
MediaTek, Inc. MediaTek chipset MT8186
MediaTek, Inc. MediaTek chipset MT8188
MediaTek, Inc. MediaTek chipset MT8196
MediaTek, Inc. MediaTek chipset MT8365
MediaTek, Inc. MediaTek chipset MT8367
MediaTek, Inc. MediaTek chipset MT8370
MediaTek, Inc. MediaTek chipset MT8371
MediaTek, Inc. MediaTek chipset MT8390
MediaTek, Inc. MediaTek chipset MT8391
MediaTek, Inc. MediaTek chipset MT8395
MediaTek, Inc. MediaTek chipset MT8676
MediaTek, Inc. MediaTek chipset MT8678
MediaTek, Inc. MediaTek chipset MT8766
MediaTek, Inc. MediaTek chipset MT8768
MediaTek, Inc. MediaTek chipset MT8775
MediaTek, Inc. MediaTek chipset MT8781
MediaTek, Inc. MediaTek chipset MT8786
MediaTek, Inc. MediaTek chipset MT8788E
MediaTek, Inc. MediaTek chipset MT8791T
MediaTek, Inc. MediaTek chipset MT8792
MediaTek, Inc. MediaTek chipset MT8793
MediaTek, Inc. MediaTek chipset MT8796
MediaTek, Inc. MediaTek chipset MT8873
MediaTek, Inc. MediaTek chipset MT8883
MediaTek, Inc. MediaTek chipset MT8893
MediaTek, Inc. MediaTek chipset MT8910

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.