CVE-2026-20488: mt6991 firmware Version not applicable in the source CPE; +17 more affected products

Affected technology

mt6991 firmware · Version not applicable in the source CPE
mediatek

mt6993 firmware · Version not applicable in the source CPE
mediatek

mt8126 firmware · Version not applicable in the source CPE
mediatek

mt8171 firmware · Version not applicable in the source CPE
mediatek

mt8188 firmware · Version not applicable in the source CPE
mediatek

mt8189 firmware · Version not applicable in the source CPE
mediatek

mt8367 firmware · Version not applicable in the source CPE
mediatek

mt8668 firmware · Version not applicable in the source CPE
mediatek

mt8676 firmware · Version not applicable in the source CPE
mediatek

mt8678 firmware · Version not applicable in the source CPE
mediatek

mt8766 firmware · Version not applicable in the source CPE
mediatek

mt8768 firmware · Version not applicable in the source CPE
mediatek

mt8781 firmware · Version not applicable in the source CPE
mediatek

mt8786 firmware · Version not applicable in the source CPE
mediatek

mt8791t firmware · Version not applicable in the source CPE
mediatek

mt8799 firmware · Version not applicable in the source CPE
mediatek

mt8910 firmware · Version not applicable in the source CPE
mediatek

MediaTek chipset · MT6991, MT6993, MT8126, MT8171, MT8188, MT8189, MT8367, MT8668, MT8676, MT8678, MT8766, MT8768, MT8781, MT8786, MT8791T, MT8799, MT8910
MediaTek, Inc.

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 3.1): Local · High privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could access information they should not be able to access under the conditions described by the source. Source advisory’s CVSS 3.1 assessment (base score 4.4/10) rates confidentiality impact as high; integrity and availability impact as none.