Vulnerability Database

321,822

Total vulnerabilities in the database

CVE-2026-20407

In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00464377; Issue ID: MSV-4905.

  • Published: Feb 2, 2026
  • Updated: Feb 4, 2026
  • CVE: CVE-2026-20407
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.3
  • AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CWEs:

Software From Fixed in
mediatek / nbiot_sdk - 3.8.x