Vulnerability Details CVE-2026-20480
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960023 (Note: For MT6880, MT6890, MT6980D, MT6988, MT6990) / AUTO00851189 (Note: For MT2735, MT3737); Issue ID: MSV-7586.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 1.2%
CVSS Severity
CVSS v3 Score 5.5
Products affected by CVE-2026-20480
-
cpe:2.3:h:mediatek:mt2735:-
-
cpe:2.3:h:mediatek:mt6880:-
-
cpe:2.3:h:mediatek:mt6890:-
-
cpe:2.3:h:mediatek:mt6980d:-
-
cpe:2.3:h:mediatek:mt6988:-
-
cpe:2.3:h:mediatek:mt6990:-
-
cpe:2.3:o:mediatek:mt2735_firmware:-
-
cpe:2.3:o:mediatek:mt2737_firmware:-
-
cpe:2.3:o:mediatek:mt6880_firmware:-
-
cpe:2.3:o:mediatek:mt6890_firmware:-
-
cpe:2.3:o:mediatek:mt6980d_firmware:-
-
cpe:2.3:o:mediatek:mt6988_firmware:-
-
cpe:2.3:o:mediatek:mt6990_firmware:-