CVE-2026-20494

Analyzed Analyzed - Analysis Complete

Out of Bounds Read in Wifi System Component

Publication date: 2026-08-03

Last updated on: 2026-08-19

Assigner: MediaTek, Inc.

Description

In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10960006 / BORA00155314, BORA00155001, BORA00154907; Issue ID: MSV-7570.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-03

Last Modified

2026-08-19

Generated

2026-08-23

AI Q&A

2026-08-03

EPSS Evaluated

2026-08-22

NVD

CVE-2026-20494

EUVD

EUVD-2026-52084

Affected Vendors & Products

Vendor	Product	Version / Range
mediatek	mt6890_firmware	*
mediatek	mt6988_firmware	*
mediatek	mt6990_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is a vulnerability in the wifi component where a missing bounds check can lead to an out of bounds read. This flaw could allow local information disclosure if an attacker already has System privilege access. No user interaction is required to exploit this issue.

Detection Guidance

Detection requires system-level access due to the need for System privilege. Check for MediaTek WiFi driver versions affected by Patch IDs ALPS10960006, BORA00155314, BORA00155001, or BORA00154907. Review logs for out-of-bounds read events in WiFi components.

Impact Analysis

If exploited, this vulnerability could allow an attacker with System privilege to read memory outside intended bounds, potentially accessing sensitive information. However, the attacker must already have elevated privileges, limiting the immediate impact.

Compliance Impact

This vulnerability involves a possible out of bounds read in wifi due to missing bounds check, leading to local information disclosure if System privilege is obtained. It does not directly impact compliance with GDPR, HIPAA, or similar standards as it requires prior access and does not involve unauthorized data exposure across systems or networks.

Mitigation Strategies

Apply the provided patches (ALPS10960006, BORA00155314, BORA00155001, BORA00154907) to address the missing bounds check in the wifi component.

Hi! I’m here to help you understand CVE-2026-20494. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70