CVE-2026-20528

Analyzed Analyzed - Analysis Complete

Memory Corruption in MediaTek ccci Driver

Publication date: 2026-10-05

Last updated on: 2026-10-09

Assigner: MediaTek, Inc.

Description

In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, crashes, or privilege escalation if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS11428950 (Note: For MT6880, MT6890) / ALPS10563453 (Note: For MT6980D, MT6990, MT6986, MT6986D, MT6813, MT6988) / AUTO00858766 (Note: For MT2735, MT2737); Issue ID: MSV-9893.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-05

Last Modified

2026-10-09

Generated

2026-10-19

AI Q&A

2026-10-05

EPSS Evaluated

2026-10-18

NVD

CVE-2026-20528

EUVD

EUVD-2026-92195

Affected Vendors & Products

Vendor	Product	Version / Range
mediatek	mt2735_firmware	*
mediatek	mt2737_firmware	*
mediatek	mt6813_firmware	*
mediatek	mt6880_firmware	*
mediatek	mt6890_firmware	*
mediatek	mt6980d_firmware	*
mediatek	mt6986_firmware	*
mediatek	mt6986d_firmware	*
mediatek	mt6988_firmware	*
mediatek	mt6990_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is in MediaTek's ccci component where a missing bounds check can lead to out-of-bounds write and read operations. This may cause local information disclosure, memory corruption, crashes, or privilege escalation if an attacker already has System privilege. User interaction is required for exploitation.

Detection Guidance

Since this vulnerability is specific to the MediaTek ccci component and requires local System privilege for exploitation, detection would typically involve checking for unusual activity or crashes in the ccci module. However, no specific detection commands are provided in the available context.

Impact Analysis

If exploited, this vulnerability could allow an attacker with System privilege to escalate privileges further, access sensitive local information, corrupt memory, or crash the system. However, user interaction is needed for exploitation, and the attacker must already have System privilege.

Compliance Impact

This vulnerability could lead to local information disclosure, memory corruption, crashes, or privilege escalation if exploited by a malicious actor with System privilege. Such impacts may compromise data confidentiality and integrity, which are critical for compliance with standards like GDPR and HIPAA.

Mitigation Strategies

Apply the provided patches immediately: ALPS11428950 for MT6880/MT6890, ALPS10563453 for MT6980D/MT6990/MT6986/MT6986D/MT6813/MT6988, or AUTO00858766 for MT2735/MT2737. Ensure the System privilege is not granted to untrusted actors to prevent exploitation.

Hi! I’m here to help you understand CVE-2026-20528. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70