CVE-2026-20495
In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00488300; Issue ID: MSV-7296.
- Score
- CVSS 3.1 7.8 High
- Status
- Analyzed - security@mediatek.com
- Published
- 2026-08-03
- Last modified
- 2026-10-23
- Weaknesses
- CWE-862
Affected products
- Mt7902 Firmware (Mediatek)
- Mt7920 Firmware (Mediatek)
- Mt7921 Firmware (Mediatek)
- Mt7922 Firmware (Mediatek)
- Mt7925 Firmware (Mediatek)
- Mt7927 Firmware (Mediatek)
- Mediatek Chipset (Mediatek Inc.)
References
- https://www.mediatek.com/product-security-bulletin/August-2026
