Description
In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981478 (Note: For MT6890, MT6990, MT6988) / AUTO00851173 (Note: For MT2735, MT2737); Issue ID: MSV-7652.
Affected products
mediatek: mt2735 firmware; mediatek: mt2735; mediatek: mt2737 firmware; mediatek: mt2737; mediatek: mt6890 firmware; mediatek: mt6890; mediatek: mt6988 firmware; mediatek: mt6988; mediatek: mt6990 firmware; mediatek: mt6990
References1
- www.mediatek.com/product-security-bulletin/August-2026 Vendor Advisory
Metrics
- CVSS 3.1
-
5.5
MEDIUM
Score source: CNA
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS — exploit probability
- 0% percentile: 4 · as of 13 November 2026
- CWE
- CWE-787
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.