{"id":"CVE-2026-20553","title":"In DA, there is a possible out of bounds write due to a missing bounds check","summary":"In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User intera…","severity":"medium","cvss":6.8,"cvssVector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssSource":"adp","cwe":["CWE-787"],"vendor":"MediaTek, Inc.","product":"MediaTek chipset","affected":["mediatek_chipset MT2713","mediatek_chipset MT2718","mediatek_chipset MT2737","mediatek_chipset MT6781","mediatek_chipset MT6789","mediatek_chipset MT6813","mediatek_chipset MT6835","mediatek_chipset MT6855","mediatek_chipset MT6858","mediatek_chipset MT6878","mediatek_chipset MT6879","mediatek_chipset MT6880","mediatek_chipset MT6881","mediatek_chipset MT6886","mediatek_chipset MT6890","mediatek_chipset MT6895","mediatek_chipset MT6897","mediatek_chipset MT6899","mediatek_chipset MT6982VB","mediatek_chipset MT6983","mediatek_chipset MT6985","mediatek_chipset MT6986","mediatek_chipset MT6989","mediatek_chipset MT6990","mediatek_chipset MT6991","mediatek_chipset MT8188","mediatek_chipset MT8189","mediatek_chipset MT8370","mediatek_chipset MT8390","mediatek_chipset MT8676","mediatek_chipset MT8678"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-11-02T17:02:55.747386Z"},"published":"2026-11-02","updated":"2026-11-02","sourceUpdated":"2026-11-02T17:02:59.660Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-20553","references":[{"url":"https://www.mediatek.com/product-security-bulletin/November-2026"}],"tags":["cve.org"],"epss":0.00191,"epssPercentile":0.08795,"ingestedAt":"2026-11-05T19:30:42.718Z","slug":"CVE-2026-20553","body":"## Overview\n\nIn DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11468968; Issue ID: MSV-10166.\n\n## Affected\n\n- `mediatek_chipset MT2713`\n- `mediatek_chipset MT2718`\n- `mediatek_chipset MT2737`\n- `mediatek_chipset MT6781`\n- `mediatek_chipset MT6789`\n- `mediatek_chipset MT6813`\n- `mediatek_chipset MT6835`\n- `mediatek_chipset MT6855`\n- `mediatek_chipset MT6858`\n- `mediatek_chipset MT6878`\n- `mediatek_chipset MT6879`\n- `mediatek_chipset MT6880`\n- `mediatek_chipset MT6881`\n- `mediatek_chipset MT6886`\n- `mediatek_chipset MT6890`\n- `mediatek_chipset MT6895`\n- `mediatek_chipset MT6897`\n- `mediatek_chipset MT6899`\n- `mediatek_chipset MT6982VB`\n- `mediatek_chipset MT6983`\n- `mediatek_chipset MT6985`\n- `mediatek_chipset MT6986`\n- `mediatek_chipset MT6989`\n- `mediatek_chipset MT6990`\n- `mediatek_chipset MT6991`\n- `mediatek_chipset MT8188`\n- `mediatek_chipset MT8189`\n- `mediatek_chipset MT8370`\n- `mediatek_chipset MT8390`\n- `mediatek_chipset MT8676`\n- `mediatek_chipset MT8678`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":37,"depthScoreParts":{"impact":37.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}