CVE-2026-20466 | MediaTek MT2737/MT6880/MT6890/MT6990 sec boot heap-based overflow (AUTO00845351/ALPS11072643)

August 3, 2026 Yanac

A vulnerability marked as very critical has been reported in MediaTek MT2737, MT6880, MT6890 and MT6990. This affects an unknown function of the component sec boot. This manipulation causes heap-based buffer overflow.

The identification of this vulnerability is CVE-2026-20466. The attack can only be executed locally. There is no exploit available.

To fix this issue, it is recommended to deploy a patch.VulDB Recent EntriesRead More