CVE-2026-20446

In sec boot, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service, if an attacker has physical access to the device, with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09963054; Issue ID: MSV-3899.

• CWE-787
• CWE-190

• https://corp.mediatek.com/product-security-bulletin/April-2026Vendor Advisory

Published

Apr 7, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-20440In MAE, there is a possible out of bounds write due to a mis…6.7
• CVE-2026-20441In MAE, there is a possible out of bounds write due to a mis…6.7
• CVE-2026-20442In display, there is a possible system crash due to use afte…4.4
• CVE-2026-20443In display, there is a possible memory corruption due to use…6.7
• CVE-2026-20444In display, there is a possible memory corruption due to a m…6.7
• CVE-2026-20445In MDDP, there is a possible system crash due to a race cond…4.4
• CVE-2026-20447In geniezone, there is a possible escalation of privilege du…6.7
• CVE-2026-20448In geniezone, there is a possible escalation of privilege du…6.7
• CVE-2026-20449In Modem, there is a possible system crash due to a heap buf…6.5
• CVE-2026-2045GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execut…7.8
• CVE-2026-20450In Modem, there is a possible system crash due to incorrect …6.5
• CVE-2026-20451In slbc, there is a possible out of bounds write due to type…6.7