CVE-2026-20451: Medium severity MediaTek Mt8115 Firmware vulnerability

Published May 4, 2026
·
Updated

In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504.

Affected Software

64 affected components
All of the following
MediaTek Mt8115 Firmware
MediaTek Mt8115
All of the following
MediaTek Mt8186 Firmware
MediaTek Mt8186
All of the following
MediaTek Mt8188 Firmware
MediaTek Mt8188
All of the following
MediaTek Mt8196 Firmware
MediaTek Mt8196
All of the following
MediaTek Mt8365 Firmware
MediaTek Mt8365
All of the following
MediaTek Mt8367 Firmware
MediaTek Mt8367
All of the following
MediaTek Mt8370 Firmware
MediaTek Mt8370
All of the following
MediaTek Mt8371 Firmware
MediaTek Mt8371
All of the following
MediaTek Mt8390 Firmware
MediaTek Mt8390
All of the following
MediaTek Mt8391 Firmware
MediaTek Mt8391
All of the following
MediaTek Mt8395 Firmware
MediaTek Mt8395
All of the following
MediaTek Mt8676 Firmware
MediaTek Mt8676
All of the following
MediaTek Mt8678 Firmware
MediaTek Mt8678
All of the following
MediaTek Mt8766 Firmware
MediaTek Mt8766
All of the following
MediaTek Mt8768 Firmware
MediaTek Mt8768
All of the following
MediaTek Mt8775 Firmware
MediaTek Mt8775
All of the following
MediaTek Mt8781 Firmware
MediaTek Mt8781
All of the following
MediaTek Mt8786 Firmware
MediaTek Mt8786
All of the following
MediaTek Mt8788e Firmware
MediaTek Mt8788e
All of the following
MediaTek Mt8791t Firmware
MediaTek Mt8791t
All of the following
MediaTek Mt8792 Firmware
MediaTek Mt8792
All of the following
MediaTek Mt8793 Firmware
MediaTek Mt8793
All of the following
MediaTek Mt8796 Firmware
MediaTek Mt8796
All of the following
MediaTek Mt8873 Firmware
MediaTek Mt8873
All of the following
MediaTek Mt8883 Firmware
MediaTek Mt8883
All of the following
MediaTek Mt8893 Firmware
MediaTek Mt8893
All of the following
MediaTek Mt8910 Firmware
MediaTek Mt8910
All of the following
MediaTek Mt2718 Firmware
MediaTek Mt2718
All of the following
MediaTek Mt6899 Firmware
MediaTek Mt6899
All of the following
MediaTek Mt6985 Firmware
MediaTek Mt6985
All of the following
MediaTek Mt6989 Firmware
MediaTek Mt6989
All of the following
MediaTek Mt6991 Firmware
MediaTek Mt6991

Event History

May 4, 2026
CVE Published
via MITRE·05:42 AM
Data Sourced
via MITRE·05:42 AM
DescriptionWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-20451?

CVE-2026-20451 is classified as a local escalation of privilege vulnerability due to a possible out of bounds write.

2

How do I fix CVE-2026-20451?

To fix CVE-2026-20451, apply the available patch with ID ALPS10828685.

3

What software is affected by CVE-2026-20451?

CVE-2026-20451 affects several MediaTek firmware versions including Mt8115, Mt8186, Mt8188, and others.

4

Can CVE-2026-20451 be exploited without user interaction?

Yes, CVE-2026-20451 can be exploited without user interaction if the attacker has obtained system privileges.

5

What type of vulnerability is CVE-2026-20451?

CVE-2026-20451 is a type confusion vulnerability that can lead to out of bounds write conditions.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203