CVE-2026-20552
Received
Received - Intake
Memory Corruption in MediaTek ccci Driver
Vulnerability report for CVE-2026-20552, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-11-02
Last updated on: 2026-11-02
Assigner: MediaTek, Inc.
Description
Description
In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11523478 (Note: For MT6880, MT6890) / ALPS11297423 (Note: For MT6813, MT6986, MT6982, MT6980D) / AUTO00864897 (Note: For MT2735, MT2737); Issue ID: MSV-10724.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| MediaTek, Inc. | MediaTek chipset | MT2735 |
| MediaTek, Inc. | MediaTek chipset | MT2737 |
| MediaTek, Inc. | MediaTek chipset | MT6813 |
| MediaTek, Inc. | MediaTek chipset | MT6880 |
| MediaTek, Inc. | MediaTek chipset | MT6890 |
| MediaTek, Inc. | MediaTek chipset | MT6980D |
| MediaTek, Inc. | MediaTek chipset | MT6982 |
| MediaTek, Inc. | MediaTek chipset | MT6986 |
| MediaTek, Inc. | MediaTek chipset | MT6988 |
| MediaTek, Inc. | MediaTek chipset | MT6990 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
