CVE-2026-20465: Mediatek, Inc MediaTek Chipset

High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days.

In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00489200; Issue ID: MSV-7834.

Affected products

Published 2026-08-03. Last modified 2026-08-28.