CVE-2026-20586
Estado: AnalizadaAlta (8.8)—
En vdec, existe una posible escritura fuera de límites debido a la falta de una comprobación de límites. Esto podría provocar una escalada de privilegios remota sin necesidad de privilegios de ejecución adicionales. Se necesita interacción del usuario para la explotación. Patch ID: ALPS11383899; Issue ID: MSV-9614.
Traducción automática del texto original de NVD (en inglés).
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Puntuación base: 8.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.38%
- Percentil entre todas las CVEs puntuadas: 30
- Fecha de la puntuación: 11/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
🎯 Técnicas ATT&CK
Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.
- Explotación
T1203Exploitation for Client Executionexecution95 % - Impacto principal
T1059Command and Scripting Interpreterexecution75 % - Impacto secundario
T1068Exploitation for Privilege Escalationprivilege escalation85 %
AV:N/UI:R apunta a T1203 (ejecución en cliente). CWE-787 (buffer overflow) en vdec típicamente permite código arbitrario (T1059) y escalada a privilegios (T1068) indicada por el texto.
Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.
🛡️ Mitigaciones ATT&CK que cubren estas técnicas
Tecnologías afectadas (25)
Mediatek — Mt2718 FirmwareMediatek — Mt6768 FirmwareMediatek — Mt6769 FirmwareMediatek — Mt6789 FirmwareMediatek — Mt6833 FirmwareMediatek — Mt6855 FirmwareMediatek — Mt6877 FirmwareMediatek — Mt8186 FirmwareMediatek — Mt8188 FirmwareMediatek — Mt8189 FirmwareMediatek — Mt8195 FirmwareMediatek — Mt8196 FirmwareMediatek — Mt8367 FirmwareMediatek — Mt8391 FirmwareMediatek — Mt8395 FirmwareMediatek — Mt8668 FirmwareMediatek — Mt8676 FirmwareMediatek — Mt8678 FirmwareMediatek — Mt8696 FirmwareMediatek — Mt8781 FirmwareMediatek — Mt8788e FirmwareMediatek — Mt8792 FirmwareMediatek — Mt8793 FirmwareMediatek — Mt8799 FirmwareMediatek — Mt8910 Firmware
CWE
- CWE-787
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-20586",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-20586",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2026-10-05T00:00:00+00:00"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "security@mediatek.com",
"affectedData": [
{
"vendor": "MediaTek, Inc.",
"product": "MediaTek chipset",
"versions": [
{
"status": "affected",
"version": "MT2718"
},
{
"status": "affected",
"version": "MT6768"
},
{
"status": "affected",
"version": "MT6769"
},
{
"status": "affected",
"version": "MT6789"
},
{
"status": "affected",
"version": "MT6833"
},
{
"status": "affected",
"version": "MT6855"
},
{
"status": "affected",
"version": "MT6877"
},
{
"status": "affected",
"version": "MT8186"
},
{
"status": "affected",
"version": "MT8188"
},
{
"status": "affected",
"version": "MT8189"
},
{
"status": "affected",
"version": "MT8195"
},
{
"status": "affected",
"version": "MT8196"
},
{
"status": "affected",
"version": "MT8367"
},
{
"status": "affected",
"version": "MT8391"
},
{
"status": "affected",
"version": "MT8395"
},
{
"status": "affected",
"version": "MT8668"
},
{
"status": "affected",
"version": "MT8676"
},
{
"status": "affected",
"version": "MT8678"
},
{
"status": "affected",
"version": "MT8696"
},
{
"status": "affected",
"version": "MT8781"
},
{
"status": "affected",
"version": "MT8788E"
},
{
"status": "affected",
"version": "MT8792"
},
{
"status": "affected",
"version": "MT8793"
},
{
"status": "affected",
"version": "MT8799"
},
{
"status": "affected",
"version": "MT8910"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2026-10-05T02:16:53.803",
"references": [
{
"url": "https://www.mediatek.com/product-security-bulletin/October-2026",
"tags": [
"Vendor Advisory"
],
"source": "security@mediatek.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "security@mediatek.com",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614."
}
],
"lastModified": "2026-10-08T14:24:47.710",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8910_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A05E635E-9559-4899-A7BA-A74EB6501D1C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8910:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8C81BC81-1358-4005-8D35-92428D052A65"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt2718_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDCA451B-219B-4490-98F3-60A569B5C513"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt2718:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F5506327-7DDF-4E88-9EA8-10B8E32F848B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt6768_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16EF9082-FC9B-4790-A79D-AA62C62E4B88"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt6768:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "06CD97E1-8A76-48B4-9780-9698EF5A960F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt6789_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "524AB96D-4C15-47A6-B276-6B873796E8F3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt6789:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8B9B0D82-82C1-4A77-A016-329B99C45F49"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt6769_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C435FED6-829E-4788-A61C-92A2250872AC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt6769:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D23991D5-1893-49F4-8A06-D5E66C96C3B3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt6833_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA0F3AD5-4D2B-4480-AA79-44EFD4E29348"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9814939B-F05E-4870-90C0-7C0F6BAAEB39"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt6855_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E997ED4F-33F3-4508-9B12-99DBA0D845B2"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "89AFEE24-7AAD-4EDB-8C3E-EDBA3240730A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt6877_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07F67D59-75F0-4056-BCCE-F7888912CAB3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7CA9352F-E9BD-4656-9B7C-4AFEE2C78E58"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8186_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CEE2EEE-3512-429F-9DAD-E17D64CE447D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8186:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E4932D34-06F4-49D7-81FB-772A82E8A5B5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8188_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "30E10DDB-6D3D-42CB-9DB9-ED25E6163D3D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8188:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BA3D4A45-38EE-4125-AE67-89D1C707F95A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8189_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "527C8F57-8492-49BF-BCA9-0D77011D3493"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8189:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AE35C440-2C15-42FF-ADD0-D99C0FB7D1C9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8195_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4E513B6-2909-4CA3-AF80-F1AE88BE4F18"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8195:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "ED210E64-6CE7-42B1-849E-68C0E22521F6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8196_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE7B4BD3-A945-4C45-8E76-CEE2ADE2001E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8196:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FB0C4D80-28BC-4C4D-B522-AD9EC5222A2E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8367_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32C24935-B6E6-4923-B81C-D29BBEED2B3C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8367:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A28FA947-314F-465B-8ADD-F7973F02D82A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8391_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16860004-FEBE-4904-952E-222A9AFD0A2F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8391:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "43B2824E-8D18-4DD7-91E7-41578B2FCD6C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8395_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EFD0432-40B9-4121-9F13-D15645C60191"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8395:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D98FBE1C-D57B-49D9-9C4E-8A133A0C1C89"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8668_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3EAACB56-716C-4E17-AB78-F5E68B75B791"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8668:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2589C222-3D62-4BDB-98F2-5F1E38600D8D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8676_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "645D7C99-A0A0-4FB0-97AC-3DA5161A44D9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EE302F6F-170E-4350-A8F4-65BE0C50CB78"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8678_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFEC7A7B-6948-4B8A-BFA1-9F9D07043605"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "152A5F3D-8004-4649-BDB1-E6F0798AF1CB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8696_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D0E6EB8-31E4-4702-891A-9B34C0535BD6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8696:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "26573298-76BC-49FE-8D99-CF03ED01B185"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8781_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E2280E5-F903-4541-8404-9F789CEFF172"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8781:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "533284E5-C3AF-48D3-A287-993099DB2E41"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8788e_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65B4F295-BF35-4A71-8567-CB1B367D80E9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8788e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CEDF887A-1862-4336-ABFC-371838E1D029"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8792_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE904A76-14A2-41D5-86FF-BCA686342E85"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "336FC69E-E89F-4642-B6B9-8009D9A2BD52"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8793_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42C2F52D-C49C-4AFF-B6FA-FFA82EF96142"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2FBD3487-F8CE-406C-8BD7-DD57FF8CD60B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mediatek:mt8799_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB8ADEB7-A1A3-4781-BB65-4D2AF9896F80"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:mediatek:mt8799:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "ACB27F98-6318-44C8-A28D-375A357A03CA"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "security@mediatek.com"
}