ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2026-20486

—
CVSS 3.1
6.7 medium
EPSS
<1%p2
Published
()
Modified
Description

In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833.

Vendors
mediatek
Products
mt8910 firmware, mt2718 firmware, mt6878 firmware, mt6895 firmware, mt6991 firmware, mt6993 firmware, mt8370 firmware, mt8390 firmware, mt8395 firmware, mt8678 firmware, mt8799 firmware
Weakness
CWE-754
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news

No ingested article mentions this CVE yet.