Vulnerability Description
In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mediatek | Mt8115 Firmware | - |
| Mediatek | Mt8115 | - |
| Mediatek | Mt8186 Firmware | - |
| Mediatek | Mt8186 | - |
| Mediatek | Mt8188 Firmware | - |
| Mediatek | Mt8188 | - |
| Mediatek | Mt8196 Firmware | - |
| Mediatek | Mt8196 | - |
| Mediatek | Mt8365 Firmware | - |
| Mediatek | Mt8365 | - |
| Mediatek | Mt8367 Firmware | - |
| Mediatek | Mt8367 | - |
| Mediatek | Mt8370 Firmware | - |
| Mediatek | Mt8370 | - |
| Mediatek | Mt8371 Firmware | - |
| Mediatek | Mt8371 | - |
| Mediatek | Mt8390 Firmware | - |
| Mediatek | Mt8390 | - |
| Mediatek | Mt8391 Firmware | - |
| Mediatek | Mt8391 | - |
Related Weaknesses (CWE)
References
- https://corp.mediatek.com/product-security-bulletin/May-2026Vendor Advisory
FAQ
What is CVE-2026-20451?
CVE-2026-20451 is a vulnerability with a CVSS score of 6.7 (MEDIUM). In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interactio...
How severe is CVE-2026-20451?
CVE-2026-20451 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-20451?
Check the references section above for vendor advisories and patch information. Affected products include: Mediatek Mt8115 Firmware, Mediatek Mt8115, Mediatek Mt8186 Firmware, Mediatek Mt8186, Mediatek Mt8188 Firmware.