CVE-2026-20589
MEDIUMCVSS 6.7Description
In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606.
Timeline
Published:October 5th, 2026 2:16 AM
Last modified:October 30th, 2026 3:16 AM
CVSS Scoring
CVSS v3: 6.7 (MEDIUM)
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Software
From NVD CPE configuration data
Vendors
mediatek
Products
mt2718_firmwaremt6768_firmwaremt6769_firmwaremt6789_firmwaremt6833_firmwaremt6855_firmwaremt6877_firmwaremt8186_firmwaremt8188_firmwaremt8189_firmwaremt8195_firmwaremt8196_firmwaremt8367_firmwaremt8391_firmwaremt8395_firmwaremt8668_firmwaremt8676_firmwaremt8678_firmwaremt8696_firmwaremt8781_firmware
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
Source: NIST NVD · Data may lag official sources by up to one minute