{"id":"CVE-2026-20588","revision":"21e5a2bfe57f4d7a9479bf77e8aedc04","records":[{"revision":"21e5a2bfe57f4d7a9479bf77e8aedc04","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-20588","aliases":[],"title":"In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploita…","description":"In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9607.","state":0,"publishedAt":"2026-10-05T01:40:01.318+00:00","modifiedAt":"2026-10-21T07:59:18.078+00:00","affected":[{"ecosystem":"Vendor product","name":"MediaTek chipset","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"MediaTek, Inc.\",\n                    \"product\": \"MediaTek chipset\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"MT2718\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT6768\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT6769\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT6789\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT6833\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT6855\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT6877\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8186\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8188\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8189\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8195\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8196\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8367\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8391\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8395\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8696\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8781\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8788E\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8792\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8793\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8799\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8910\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://www.mediatek.com/product-security-bulletin/October-2026"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-20588","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-20588","identifiers":["CVE-2026-20588"]},"retained":false,"historicalAffected":[]}],"coverage":[]}