CVE-2026-20544

In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.

• CWE-787

• https://www.mediatek.com/product-security-bulletin/October-2026Vendor Advisory

Published

Oct 5, 2026

Last Modified

Oct 9, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-20539In Modem, there is a possible out of bounds read due to a mi…5.3
• CVE-2026-2054A security flaw has been discovered in D-Link DIR-605L and D…7.5
• CVE-2026-20540In Modem, there is a possible out of bounds read due to a mi…5.3
• CVE-2026-20541In Modem, there is a possible out of bounds read due to a mi…5.3
• CVE-2026-20542In apusys, there is a possible memory corruption due to use …6.7
• CVE-2026-20543In Modem, there is a possible information disclosure due to …5.5
• CVE-2026-2055A weakness has been identified in D-Link DIR-605L and DIR-61…7.5
• CVE-2026-2056A security vulnerability has been detected in D-Link DIR-605…7.5
• CVE-2026-2057A vulnerability was detected in SourceCodester Medical Cente…9.8
• CVE-2026-20579In vdec, there is a possible out of bounds write due to type…6.7
• CVE-2026-2058A flaw has been found in mathurvishal CloudClassroom-PHP-Pro…9.8
• CVE-2026-20586In vdec, there is a possible out of bounds write due to a mi…8.8