CVE-2026-20482: Medium severity MediaTek Mt8532 Firmware vulnerability
In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch WCNCR00486814 - Compensating control
Mitigate potential remote denial of service by limiting exposure of the affected WLAN STA firmware logging behavior (e.g., reduce logging verbosity or restrict network adjacency where the affected firmware runs) until Patch ID WCNCR00486814 is applied.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20482?
The severity of CVE-2026-20482 is rated as medium with a score of 6.5.
How does CVE-2026-20482 affect system performance?
CVE-2026-20482 can cause the system to become unresponsive, leading to a denial of service.
What types of attacker privileges are required to exploit CVE-2026-20482?
CVE-2026-20482 does not require any additional execution privileges to exploit the vulnerability.
Is user interaction needed to exploit CVE-2026-20482?
No, user interaction is not needed for the exploitation of CVE-2026-20482.
What is the patch ID for CVE-2026-20482?
The patch ID for CVE-2026-20482 is WCNCR00486814.