MEDIUM🇵🇱 Wersja polska

CVE-2026-20419

CVSS 6.5v3.1pub. 2026-02-02upd. 2026-02-05

In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461663 / WCNCR00463309; Issue ID: MSV-4852.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Mediatek Mt6890

    HW
    Mediatek
    all versions

  • Mediatek Mt6989tb

    HW
    Mediatek
    all versions

  • Mediatek Mt7902

    HW
    Mediatek
    all versions

  • Mediatek Mt7915

    HW
    Mediatek
    all versions

  • Mediatek Mt7916

    HW
    Mediatek
    all versions

  • Mediatek Mt7920

    HW
    Mediatek
    all versions

  • Mediatek Mt7921

    HW
    Mediatek
    all versions

  • Mediatek Mt7922

    HW
    Mediatek
    all versions

  • Mediatek Mt7925

    HW
    Mediatek
    all versions

  • Mediatek Mt7927

    HW
    Mediatek
    all versions

  • Mediatek Mt7981

    HW
    Mediatek
    all versions

  • Mediatek Mt7986

    HW
    Mediatek
    all versions

  • Mediatek Mt8196

    HW
    Mediatek
    all versions

  • Mediatek Mt8668

    HW
    Mediatek
    all versions

  • Mediatek Mt8676

    HW
    Mediatek
    all versions

  • Mediatek Mt8678

    HW
    Mediatek
    all versions

  • Mediatek Mt8775

    HW
    Mediatek
    all versions

  • Mediatek Mt8791t

    HW
    Mediatek
    all versions

  • Mediatek Mt8792

    HW
    Mediatek
    all versions

  • Mediatek Mt8793

    HW
    Mediatek
    all versions

  • Mediatek Mt8796

    HW
    Mediatek
    all versions

  • Mediatek Mt8873

    HW
    Mediatek
    all versions

  • Mediatek Mt8883

    HW
    Mediatek
    all versions

  • Mediatek Mt8893

    HW
    Mediatek
    all versions

  • Mediatek Mt8910

    HW
    Mediatek
    all versions

  • Mediatek Nbiot Sdk

    APP
    Mediatek
    ≤ 3.6

  • Mediatek Software Development Kit

    APP
    Mediatek
    ≤ 7.6.7.2

  • Openwrt

    OS
    Openwrt
    19.07.021.02.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2026-62948CRITICAL9.6PL ✓same product

OpenWrt odhcpd: XSS przez wstrzyknięcie newline w nazwę hosta DHCPv6

CVE-2026-30871CRITICAL9.5PL ✓same product

Stack-based Buffer Overflow w demonie mdns OpenWrt — przepełnienie stosu przez PTR query

CVE-2026-30872CRITICAL9.5PL ✓same product

Stack-based Buffer Overflow w mdns daemon OpenWrt — możliwy RCE

CVE-2026-20407CRITICAL9.3PL ✓same product

Privilege escalation w sterowniku WLAN STA MediaTek — brak bounds check

CVE-2025-20683CRITICAL9.8PL ✓same product

Out of bounds write w sterowniku wlan AP — eskalacja uprawnień na układach MediaTek