CVE-2026-20466: Buffer Overflow

Published Aug 3, 2026

Updated

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: AUTO00845351 (Note: For MT2737) / ALPS11072643 (Note: For MT6880, MT6890, MT6990); Issue ID: MSV-6929.

Affected Software

1 affected component

MediaTek sec boot

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch AUTO00845351
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS11072643

Event History

Aug 3, 2026

CVE Published

via MITRE·02:05 AM

Data Sourced

via MITRE·02:05 AM

DescriptionWeakness

Data Sourced

via NVD·03:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-20466?

The severity of CVE-2026-20466 is assessed as medium with a CVSS score of 6.1.

What does CVE-2026-20466 involve?

CVE-2026-20466 involves a heap buffer overflow that can lead to local escalation of privilege.

Who can exploit CVE-2026-20466?

An attacker with physical access to the device can exploit CVE-2026-20466 without requiring any execution privileges.

How do I fix CVE-2026-20466?

To fix CVE-2026-20466, apply the provided patches from MediaTek as indicated in their security bulletin.

What systems are affected by CVE-2026-20466?

CVE-2026-20466 affects devices utilizing MediaTek secure boot technology.