- Description
- In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480138; Issue ID: MSV-6295.
- Source
- security@mediatek.com
- NVD status
- Analyzed
- Products
- mt6890_firmware, mt7615_firmware, mt7915_firmware, mt7916_firmware, mt7981_firmware, mt7986_firmware, mt7990_firmware, mt7992_firmware, mt7993_firmware
CVSS 3.1
- Type
- Secondary
- Base score
- 8
- Impact score
- 5.9
- Exploitability score
- 2.1
- Vector string
- CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- security@mediatek.com
- CWE-122
- Hype score
- Not currently trending
⚠️ Vulnerabilidades en productos MediaTek ❗ CVE-2026-20455 ❗ CVE-2026-20452 ➡️ Más info: https://t.co/YKDGp9PVsd https://t.co/g5lfb39mor
@CERTpy
11 Jun 2026
68 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2026-20452 Heap Buffer Overflow in WLAN AP Driver Enabling Remote Code Execution https://t.co/YsGJvJW1l4
@VulmonFeeds
1 Jun 2026
70 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt6890_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BB9AC17B-5ED8-4B58-A7A0-B146DD1DD244",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*",
"matchCriteriaId": "171D1C08-F055-44C0-913C-AA2B73AF5B72",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt7615_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "209D0B1B-C27E-429E-ABC0-894E105814D1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt7615:-:*:*:*:*:*:*:*",
"matchCriteriaId": "05748BB1-0D48-4097-932E-E8E2E574FD8D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt7915_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E6C54AA5-6C50-4223-B433-4C14AD4E96A3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt7915:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3AB22996-9C22-4B6C-9E94-E4C055D16335",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt7916_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5318B13A-DB70-4017-AB82-2C7F5144FCFF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt7916:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DD5AA441-5381-4179-89EB-1642120F72B4",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt7981_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D70F8D77-FDEC-4AAE-B22C-4F05ED880C10",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt7981:-:*:*:*:*:*:*:*",
"matchCriteriaId": "490CD97B-021F-4350-AEE7-A2FA866D5889",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt7986_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8798F3AE-A468-49B0-AE1D-6F1E41C76085",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt7986:-:*:*:*:*:*:*:*",
"matchCriteriaId": "40A9E917-4B34-403F-B512-09EEBEA46811",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt7990_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E58E5724-B753-4E78-A5F3-4B9023A15637",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt7990:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4901B2A5-B0C8-4A0C-AC17-87D469744817",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt7992_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8CB6DB8C-E756-4FAE-ADCC-CFE91C7C735E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt7992:-:*:*:*:*:*:*:*",
"matchCriteriaId": "50D01D7D-A88D-471D-A23A-42AF4DF82952",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt7993_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F389E2A1-CE3A-4826-A248-A9BCEF3088F4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt7993:-:*:*:*:*:*:*:*",
"matchCriteriaId": "76653163-7627-4C63-A5E2-6277C0EFE23E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
]