CVE-2026-20490
Received Received - Intake

Out of Bounds Read in MediaTek CCCI Driver

Publication date: 2026-08-03

Last updated on: 2026-08-03

Assigner: MediaTek, Inc.

Description
In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10981501; Issue ID: MSV-7669.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-03
Last Modified
2026-08-03
Generated
2026-08-03
AI Q&A
2026-08-03
EPSS Evaluated
N/A
NVD
CVE-2026-20490
EUVD
EUVD-2026-52080

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mediatek ccci *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the MediaTek ccci component where a missing bounds check can lead to an out of bounds read. This issue allows a local denial of service if an attacker already has System privilege access. Exploitation does not require user interaction.

Impact Analysis

If exploited, this vulnerability could cause a denial of service on the affected device. This means the device may become unresponsive or crash, disrupting normal operations. The impact is limited to local attacks requiring System privilege.

Compliance Impact

This vulnerability is a local denial of service issue in mediatek ccci due to an out of bounds read. It requires System privilege for exploitation and does not involve user interaction. It does not directly impact data confidentiality or integrity, which are key focus areas for GDPR and HIPAA compliance.

Mitigation Strategies

Apply the patch identified as ALPS10981501 to address the missing bounds check in ccci. Ensure the System privilege is properly restricted to prevent local denial of service.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-20490. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart