CVE-2026-20488: Medium severity MediaTek Mt6991 Firmware vulnerability
In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS11004276
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20488?
CVE-2026-20488 has a risk rating of 13, indicating a high severity level.
How do I fix CVE-2026-20488?
To address CVE-2026-20488, apply patch ID ALPS11004276 as soon as possible.
What causes CVE-2026-20488?
CVE-2026-20488 is caused by a missing bounds check in the display, leading to potential local information disclosure.
Who is affected by CVE-2026-20488?
CVE-2026-20488 affects systems where a malicious actor has already obtained System privilege.
Is user interaction required to exploit CVE-2026-20488?
No, user interaction is not needed for the exploitation of CVE-2026-20488.