CVE-2026-20407

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2026-02-02

Last updated on: 2026-02-04

Assigner: MediaTek, Inc.

Description

In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00464377; Issue ID: MSV-4905.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-02-02

Last Modified

2026-02-04

Generated

2026-07-06

AI Q&A

2026-02-02

EPSS Evaluated

2026-07-05

NVD

CVE-2026-20407

EUVD

EUVD-2026-5141

Affected Vendors & Products

Vendor	Product	Version / Range
mediatek	nbiot_sdk	to 3.8 (inc)
mediatek	mt7902	*
mediatek	mt7920	*
mediatek	mt7921	*
mediatek	mt7922	*
mediatek	mt7925	*
mediatek	mt7927	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the wlan STA driver where a missing bounds check can lead to a local escalation of privilege. It means that an attacker with user-level execution privileges can exploit this flaw to gain higher privileges on the system without needing any user interaction.

Impact Analysis

The vulnerability can allow an attacker who already has user-level access to escalate their privileges locally, potentially gaining unauthorized control over the system or sensitive functions, which can lead to further compromise of the device or data.

Mitigation Strategies

Apply the patch identified as WCNCR00464377 provided by the vendor to fix the missing bounds check in the wlan STA driver, which addresses the local escalation of privilege issue.

Hi! I’m here to help you understand CVE-2026-20407. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70