CVE-2026-20452: MediaTek MT6890 Firmware

High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days.

In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480138; Issue ID: MSV-6295.

Affected products

• MediaTek MT6890 Firmware: affected versions not specified
• MediaTek MT7615 Firmware: affected versions not specified
• MediaTek MT7915 Firmware: affected versions not specified
• MediaTek MT7916 Firmware: affected versions not specified
• MediaTek MT7981 Firmware: affected versions not specified
• MediaTek MT7986 Firmware: affected versions not specified
• MediaTek MT7990 Firmware: affected versions not specified
• MediaTek MT7992 Firmware: affected versions not specified
• MediaTek MT7993 Firmware: affected versions not specified

Published 2026-06-01. Last modified 2026-07-22.