{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-20519", "tracking": { "current_release_date": "2026-11-03T22:18:54.623835Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-20519", "initial_release_date": "2026-10-05T02:25:05.206888Z", "revision_history": [ { "date": "2026-10-05T02:25:05.206888Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| References created (1).| CWES updated (1)." }, { "date": "2026-10-05T02:25:06.979313Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-10-05T02:38:30.950594Z", "number": "3", "summary": "CWES created (1).| Products created (57).| References created (1).| Description created for source.| Unknown change." }, { "date": "2026-10-05T02:38:34.235885Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-10-05T07:34:55.566193Z", "number": "5", "summary": "NCSC Score updated." }, { "date": "2026-10-05T11:27:22.475291Z", "number": "6", "summary": "CVSS created." }, { "date": "2026-10-05T11:27:23.635635Z", "number": "7", "summary": "NCSC Score updated." }, { "date": "2026-10-06T00:41:16.834336Z", "number": "8", "summary": "Source connected.| CVE status created. (valid)| Vendor_assessment created." }, { "date": "2026-10-06T12:27:49.881182Z", "number": "9", "summary": "NCSC Score updated." }, { "date": "2026-10-06T14:26:00.383202Z", "number": "10", "summary": "EPSS created.| Unknown change." }, { "date": "2026-10-06T14:26:05.679292Z", "number": "11", "summary": "NCSC Score updated." }, { "date": "2026-10-08T15:27:14.084504Z", "number": "12", "summary": "Products connected (57).| Product Identifiers created (57)." }, { "date": "2026-10-08T15:27:19.611326Z", "number": "13", "summary": "NCSC Score updated." }, { "date": "2026-10-08T19:16:46.325637Z", "number": "14", "summary": "CVSS created.| Unknown change." }, { "date": "2026-10-08T19:16:48.214165Z", "number": "15", "summary": "NCSC Score updated." }, { "date": "2026-10-13T02:41:40.027539Z", "number": "16", "summary": "Source connected.| CVE status created. (valid)" }, { "date": "2026-11-03T19:20:19.966818Z", "number": "17", "summary": "Source connected.| CVE status created. (valid)| Products connected (9).| References created (6)." }, { "date": "2026-11-03T19:20:22.175409Z", "number": "18", "summary": "NCSC Score updated." } ], "status": "interim", "version": "18" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/12", "product": { "name": "vers:unknown/12", "product_id": "CSAFPID-40402", "product_identification_helper": { "cpe": "cpe:/o:google:android:12" } } }, { "category": "product_version_range", "name": "vers:unknown/13", "product": { "name": "vers:unknown/13", "product_id": "CSAFPID-40399", "product_identification_helper": { "cpe": "cpe:/o:google:android:13" } } }, { "category": "product_version_range", "name": "vers:unknown/14 <2026-11-01", "product": { "name": "vers:unknown/14 <2026-11-01", "product_id": "CSAFPID-10011178" } }, { "category": "product_version_range", "name": "vers:unknown/15 <2026-11-01", "product": { "name": "vers:unknown/15 <2026-11-01", "product_id": "CSAFPID-10011179" } }, { "category": "product_version_range", "name": "vers:unknown/16 <2026-11-01", "product": { "name": "vers:unknown/16 <2026-11-01", "product_id": "CSAFPID-10011175" } }, { "category": "product_version_range", "name": "vers:unknown/17 <2026-11-01", "product": { "name": "vers:unknown/17 <2026-11-01", "product_id": "CSAFPID-10011176" } }, { "category": "product_version_range", "name": "vers:unknown/<2026-11-05", "product": { "name": "vers:unknown/<2026-11-05", "product_id": "CSAFPID-10011174" } }, { "category": "product_version_range", "name": "vers:unknown/automotive os <2026-11-01", "product": { "name": "vers:unknown/automotive os <2026-11-01", "product_id": "CSAFPID-10011173" } }, { "category": "product_version_range", "name": "vers:unknown/xr <2026-11-01", "product": { "name": "vers:unknown/xr <2026-11-01", "product_id": "CSAFPID-10011177" } } ], "category": "product_name", "name": "Android" } ], "category": "vendor", "name": "Google" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2567506", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8695_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "MT8695 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675060", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt2735_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt2735_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675061", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt2737_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt2737_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675085", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6813_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6813_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675086", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6833_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6833_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675088", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6835_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6835_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675090", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6853_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6853_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675092", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6855_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6855_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675094", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6873_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6873_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675095", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6875_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6875_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675097", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6877_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6877_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675100", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6878_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6878_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675102", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6879_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6879_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675103", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6880_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6880_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675104", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6883_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6883_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675105", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6885_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6885_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675106", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6886_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6886_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675107", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6889_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6889_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675108", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6890_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6890_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675109", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6891_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6891_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675110", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6893_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6893_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675111", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6895_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6895_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675113", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6896_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6896_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675114", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6897_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6897_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675115", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6899_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6899_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675116", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6980_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6980_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675118", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6983_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6983_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675120", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6985_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6985_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675122", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6989_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6989_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675124", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6990_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6990_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675125", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6991_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6991_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675130", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8676_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8676_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675131", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8678_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8678_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2567507", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8696_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8696_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675135", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8771_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8771_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675139", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8791t_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8791t_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675140", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8796_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8796_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675141", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8797_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8797_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675142", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8798_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8798_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675143", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8863_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8863_firmware" } ], "category": "vendor", "name": "MediaTek" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/mt2716", "product": { "name": "vers:unknown/mt2716", "product_id": "CSAFPID-8521636" } }, { "category": "product_version_range", "name": "vers:unknown/mt2735", "product": { "name": "vers:unknown/mt2735", "product_id": "CSAFPID-5965238" } }, { "category": "product_version_range", "name": "vers:unknown/mt2737", "product": { "name": "vers:unknown/mt2737", "product_id": "CSAFPID-5965239" } }, { "category": "product_version_range", "name": "vers:unknown/mt6813", "product": { "name": "vers:unknown/mt6813", "product_id": "CSAFPID-5965240" } }, { "category": "product_version_range", "name": "vers:unknown/mt6815", "product": { "name": "vers:unknown/mt6815", "product_id": "CSAFPID-5965241" } }, { "category": "product_version_range", "name": "vers:unknown/mt6833", "product": { "name": "vers:unknown/mt6833", "product_id": "CSAFPID-5965185" } }, { "category": "product_version_range", "name": "vers:unknown/mt6835", "product": { "name": "vers:unknown/mt6835", "product_id": "CSAFPID-5965186" } }, { "category": "product_version_range", "name": "vers:unknown/mt6853", "product": { "name": "vers:unknown/mt6853", "product_id": "CSAFPID-5965187" } }, { "category": "product_version_range", "name": "vers:unknown/mt6855", "product": { "name": "vers:unknown/mt6855", "product_id": "CSAFPID-5965188" } }, { "category": "product_version_range", "name": "vers:unknown/mt6858", "product": { "name": "vers:unknown/mt6858", "product_id": "CSAFPID-5965242" } }, { "category": "product_version_range", "name": "vers:unknown/mt6873", "product": { "name": "vers:unknown/mt6873", "product_id": "CSAFPID-5965243" } }, { "category": "product_version_range", "name": "vers:unknown/mt6875", "product": { "name": "vers:unknown/mt6875", "product_id": "CSAFPID-5965244" } }, { "category": "product_version_range", "name": "vers:unknown/mt6877", "product": { "name": "vers:unknown/mt6877", "product_id": "CSAFPID-5965189" } }, { "category": "product_version_range", "name": "vers:unknown/mt6878", "product": { "name": "vers:unknown/mt6878", "product_id": "CSAFPID-5965190" } }, { "category": "product_version_range", "name": "vers:unknown/mt6879", "product": { "name": "vers:unknown/mt6879", "product_id": "CSAFPID-5965191" } }, { "category": "product_version_range", "name": "vers:unknown/mt6880", "product": { "name": "vers:unknown/mt6880", "product_id": "CSAFPID-5965245" } }, { "category": "product_version_range", "name": "vers:unknown/mt6881", "product": { "name": "vers:unknown/mt6881", "product_id": "CSAFPID-5965311" } }, { "category": "product_version_range", "name": "vers:unknown/mt6883", "product": { "name": "vers:unknown/mt6883", "product_id": "CSAFPID-5965192" } }, { "category": "product_version_range", "name": "vers:unknown/mt6885", "product": { "name": "vers:unknown/mt6885", "product_id": "CSAFPID-5965193" } }, { "category": "product_version_range", "name": "vers:unknown/mt6886", "product": { "name": "vers:unknown/mt6886", "product_id": "CSAFPID-5965194" } }, { "category": "product_version_range", "name": "vers:unknown/mt6889", "product": { "name": "vers:unknown/mt6889", "product_id": "CSAFPID-5965195" } }, { "category": "product_version_range", "name": "vers:unknown/mt6890", "product": { "name": "vers:unknown/mt6890", "product_id": "CSAFPID-5965246" } }, { "category": "product_version_range", "name": "vers:unknown/mt6891", "product": { "name": "vers:unknown/mt6891", "product_id": "CSAFPID-5965247" } }, { "category": "product_version_range", "name": "vers:unknown/mt6893", "product": { "name": "vers:unknown/mt6893", "product_id": "CSAFPID-5965196" } }, { "category": "product_version_range", "name": "vers:unknown/mt6895", "product": { "name": "vers:unknown/mt6895", "product_id": "CSAFPID-5965197" } }, { "category": "product_version_range", "name": "vers:unknown/mt6896", "product": { "name": "vers:unknown/mt6896", "product_id": "CSAFPID-5965248" } }, { "category": "product_version_range", "name": "vers:unknown/mt6897", "product": { "name": "vers:unknown/mt6897", "product_id": "CSAFPID-5965198" } }, { "category": "product_version_range", "name": "vers:unknown/mt6899", "product": { "name": "vers:unknown/mt6899", "product_id": "CSAFPID-5965199" } }, { "category": "product_version_range", "name": "vers:unknown/mt6980", "product": { "name": "vers:unknown/mt6980", "product_id": "CSAFPID-5965249" } }, { "category": "product_version_range", "name": "vers:unknown/mt6982", "product": { "name": "vers:unknown/mt6982", "product_id": "CSAFPID-8521637" } }, { "category": "product_version_range", "name": "vers:unknown/mt6983", "product": { "name": "vers:unknown/mt6983", "product_id": "CSAFPID-5965200" } }, { "category": "product_version_range", "name": "vers:unknown/mt6985", "product": { "name": "vers:unknown/mt6985", "product_id": "CSAFPID-5965201" } }, { "category": "product_version_range", "name": "vers:unknown/mt6986", "product": { "name": "vers:unknown/mt6986", "product_id": "CSAFPID-5965250" } }, { "category": "product_version_range", "name": "vers:unknown/mt6988", "product": { "name": "vers:unknown/mt6988", "product_id": "CSAFPID-6488405" } }, { "category": "product_version_range", "name": "vers:unknown/mt6989", "product": { "name": "vers:unknown/mt6989", "product_id": "CSAFPID-5965202" } }, { "category": "product_version_range", "name": "vers:unknown/mt6990", "product": { "name": "vers:unknown/mt6990", "product_id": "CSAFPID-5965251" } }, { "category": "product_version_range", "name": "vers:unknown/mt6991", "product": { "name": "vers:unknown/mt6991", "product_id": "CSAFPID-5965203" } }, { "category": "product_version_range", "name": "vers:unknown/mt6993", "product": { "name": "vers:unknown/mt6993", "product_id": "CSAFPID-5965226" } }, { "category": "product_version_range", "name": "vers:unknown/mt8668", "product": { "name": "vers:unknown/mt8668", "product_id": "CSAFPID-5965252" } }, { "category": "product_version_range", "name": "vers:unknown/mt8676", "product": { "name": "vers:unknown/mt8676", "product_id": "CSAFPID-5965209" } }, { "category": "product_version_range", "name": "vers:unknown/mt8678", "product": { "name": "vers:unknown/mt8678", "product_id": "CSAFPID-5965210" } }, { "category": "product_version_range", "name": "vers:unknown/mt8695", "product": { "name": "vers:unknown/mt8695", "product_id": "CSAFPID-5965267" } }, { "category": "product_version_range", "name": "vers:unknown/mt8696", "product": { "name": "vers:unknown/mt8696", "product_id": "CSAFPID-5965229" } }, { "category": "product_version_range", "name": "vers:unknown/mt8755", "product": { "name": "vers:unknown/mt8755", "product_id": "CSAFPID-5965254" } }, { "category": "product_version_range", "name": "vers:unknown/mt8771", "product": { "name": "vers:unknown/mt8771", "product_id": "CSAFPID-5965214" } }, { "category": "product_version_range", "name": "vers:unknown/mt8775", "product": { "name": "vers:unknown/mt8775", "product_id": "CSAFPID-5965255" } }, { "category": "product_version_range", "name": "vers:unknown/mt8791", "product": { "name": "vers:unknown/mt8791", "product_id": "CSAFPID-5965256" } }, { "category": "product_version_range", "name": "vers:unknown/mt8791t", "product": { "name": "vers:unknown/mt8791t", "product_id": "CSAFPID-5965216" } }, { "category": "product_version_range", "name": "vers:unknown/mt8792", "product": { "name": "vers:unknown/mt8792", "product_id": "CSAFPID-5965217" } }, { "category": "product_version_range", "name": "vers:unknown/mt8793", "product": { "name": "vers:unknown/mt8793", "product_id": "CSAFPID-5965218" } }, { "category": "product_version_range", "name": "vers:unknown/mt8796", "product": { "name": "vers:unknown/mt8796", "product_id": "CSAFPID-5965220" } }, { "category": "product_version_range", "name": "vers:unknown/mt8797", "product": { "name": "vers:unknown/mt8797", "product_id": "CSAFPID-5965257" } }, { "category": "product_version_range", "name": "vers:unknown/mt8798", "product": { "name": "vers:unknown/mt8798", "product_id": "CSAFPID-5965221" } }, { "category": "product_version_range", "name": "vers:unknown/mt8863", "product": { "name": "vers:unknown/mt8863", "product_id": "CSAFPID-5965258" } }, { "category": "product_version_range", "name": "vers:unknown/mt8873", "product": { "name": "vers:unknown/mt8873", "product_id": "CSAFPID-5965222" } }, { "category": "product_version_range", "name": "vers:unknown/mt8883", "product": { "name": "vers:unknown/mt8883", "product_id": "CSAFPID-5965223" } }, { "category": "product_version_range", "name": "vers:unknown/mt8893", "product": { "name": "vers:unknown/mt8893", "product_id": "CSAFPID-5965231" } } ], "category": "product_name", "name": "MediaTek chipset" } ], "category": "vendor", "name": "MediaTek, Inc." }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-9164393", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt2716_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt2716_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6020391", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6815_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6815_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6697006", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6858_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6858_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-9164394", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6881_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6881_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-9550471", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6982_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6982_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6020394", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6986_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6986_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6697008", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6988_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6988_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6020392", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6993_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6993_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6020379", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8668_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8668_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6020380", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8755_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8755_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6020381", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8775_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8775_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6020382", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8791_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8791_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6020383", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8792_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8792_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6020384", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8793_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8793_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6020386", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8873_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8873_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6020387", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8883_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8883_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6020388", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8893_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8893_firmware" } ], "category": "vendor", "name": "mediatek" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-20519", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778993; Issue ID: MSV-8898.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-20519" }, { "category": "description", "text": "In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01778993; Issue ID: MSV-8898.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-20519" }, { "category": "other", "text": "0.00228", "title": "EPSS" }, { "category": "other", "text": "6.5", "title": "NCSC Score" }, { "category": "other", "text": "There is product data available from source Certbundde, Is related to (a version of) product Android", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "Is related to (a version of) an uncommon product", "title": "NCSC Score top decreasing factors" }, { "category": "details", "text": "Severity: 4\n", "title": "Vendor assessment" } ], "product_status": { "known_affected": [ "CSAFPID-8521636", "CSAFPID-5965238", "CSAFPID-5965239", "CSAFPID-5965240", "CSAFPID-5965241", "CSAFPID-5965185", "CSAFPID-5965186", "CSAFPID-5965187", "CSAFPID-5965188", "CSAFPID-5965242", "CSAFPID-5965243", "CSAFPID-5965244", "CSAFPID-5965189", "CSAFPID-5965190", "CSAFPID-5965191", "CSAFPID-5965245", "CSAFPID-5965311", "CSAFPID-5965192", "CSAFPID-5965193", "CSAFPID-5965194", "CSAFPID-5965195", "CSAFPID-5965246", "CSAFPID-5965247", "CSAFPID-5965196", "CSAFPID-5965197", "CSAFPID-5965248", "CSAFPID-5965198", "CSAFPID-5965199", "CSAFPID-5965249", "CSAFPID-8521637", "CSAFPID-5965200", "CSAFPID-5965201", "CSAFPID-5965250", "CSAFPID-6488405", "CSAFPID-5965202", "CSAFPID-5965251", "CSAFPID-5965203", "CSAFPID-5965226", "CSAFPID-5965252", "CSAFPID-5965209", "CSAFPID-5965210", "CSAFPID-5965267", "CSAFPID-5965229", "CSAFPID-5965254", "CSAFPID-5965214", "CSAFPID-5965255", "CSAFPID-5965256", "CSAFPID-5965216", "CSAFPID-5965217", "CSAFPID-5965218", "CSAFPID-5965220", "CSAFPID-5965257", "CSAFPID-5965221", "CSAFPID-5965258", "CSAFPID-5965222", "CSAFPID-5965223", "CSAFPID-5965231", "CSAFPID-2567506", "CSAFPID-2567507", "CSAFPID-2675060", "CSAFPID-2675061", "CSAFPID-2675085", "CSAFPID-2675086", "CSAFPID-2675088", "CSAFPID-2675090", "CSAFPID-2675092", "CSAFPID-2675094", "CSAFPID-2675095", "CSAFPID-2675097", "CSAFPID-2675100", "CSAFPID-2675102", "CSAFPID-2675103", "CSAFPID-2675104", "CSAFPID-2675105", "CSAFPID-2675106", "CSAFPID-2675107", "CSAFPID-2675108", "CSAFPID-2675109", "CSAFPID-2675110", "CSAFPID-2675111", "CSAFPID-2675113", "CSAFPID-2675114", "CSAFPID-2675115", "CSAFPID-2675116", "CSAFPID-2675118", "CSAFPID-2675120", "CSAFPID-2675122", "CSAFPID-2675124", "CSAFPID-2675125", "CSAFPID-2675130", "CSAFPID-2675131", "CSAFPID-2675135", "CSAFPID-2675139", "CSAFPID-2675140", "CSAFPID-2675141", "CSAFPID-2675142", "CSAFPID-2675143", "CSAFPID-6020379", "CSAFPID-6020380", "CSAFPID-6020381", "CSAFPID-6020382", "CSAFPID-6020383", "CSAFPID-6020384", "CSAFPID-6020386", "CSAFPID-6020387", "CSAFPID-6020388", "CSAFPID-6020391", "CSAFPID-6020392", "CSAFPID-6020394", "CSAFPID-6697006", "CSAFPID-6697008", "CSAFPID-9164393", "CSAFPID-9164394", "CSAFPID-9550471", "CSAFPID-40399", "CSAFPID-40402", "CSAFPID-10011173", "CSAFPID-10011174", "CSAFPID-10011175", "CSAFPID-10011176", "CSAFPID-10011177", "CSAFPID-10011178", "CSAFPID-10011179" ] }, "references": [ { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4288.json" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20519" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-20519" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-20519" }, { "category": "external", "summary": "Source - samsung", "url": "https://security.samsungmobile.com/securityUpdate.smsb" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss" }, { "category": "external", "summary": "Source - hkcert", "url": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20261013" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4288.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4288" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://source.android.com/docs/security/bulletin/2026/2026-11-01" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://aviatrix.ai/threat-research-center/android-sms-of-death-cve-2026-58882-remote-dos-unpatched-phones/" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://source.android.com/docs/security/bulletin/aaos/2026/2026-11-01" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://source.android.com/docs/security/bulletin/xr/2026/2026-11-01" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://www.mediatek.com/product-security-bulletin/October-2026" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-10011173", "CSAFPID-10011174", "CSAFPID-10011175", "CSAFPID-10011176", "CSAFPID-10011177", "CSAFPID-10011178", "CSAFPID-10011179", "CSAFPID-2567506", "CSAFPID-2567507", "CSAFPID-2675060", "CSAFPID-2675061", "CSAFPID-2675085", "CSAFPID-2675086", "CSAFPID-2675088", "CSAFPID-2675090", "CSAFPID-2675092", "CSAFPID-2675094", "CSAFPID-2675095", "CSAFPID-2675097", "CSAFPID-2675100", "CSAFPID-2675102", "CSAFPID-2675103", "CSAFPID-2675104", "CSAFPID-2675105", "CSAFPID-2675106", "CSAFPID-2675107", "CSAFPID-2675108", "CSAFPID-2675109", "CSAFPID-2675110", "CSAFPID-2675111", "CSAFPID-2675113", "CSAFPID-2675114", "CSAFPID-2675115", "CSAFPID-2675116", "CSAFPID-2675118", "CSAFPID-2675120", "CSAFPID-2675122", "CSAFPID-2675124", "CSAFPID-2675125", "CSAFPID-2675130", "CSAFPID-2675131", "CSAFPID-2675135", "CSAFPID-2675139", "CSAFPID-2675140", "CSAFPID-2675141", "CSAFPID-2675142", "CSAFPID-2675143", "CSAFPID-40399", "CSAFPID-40402", "CSAFPID-5965185", "CSAFPID-5965186", "CSAFPID-5965187", "CSAFPID-5965188", "CSAFPID-5965189", "CSAFPID-5965190", "CSAFPID-5965191", "CSAFPID-5965192", "CSAFPID-5965193", "CSAFPID-5965194", "CSAFPID-5965195", "CSAFPID-5965196", "CSAFPID-5965197", "CSAFPID-5965198", "CSAFPID-5965199", "CSAFPID-5965200", "CSAFPID-5965201", "CSAFPID-5965202", "CSAFPID-5965203", "CSAFPID-5965209", "CSAFPID-5965210", "CSAFPID-5965214", "CSAFPID-5965216", "CSAFPID-5965217", "CSAFPID-5965218", "CSAFPID-5965220", "CSAFPID-5965221", "CSAFPID-5965222", "CSAFPID-5965223", "CSAFPID-5965226", "CSAFPID-5965229", "CSAFPID-5965231", "CSAFPID-5965238", "CSAFPID-5965239", "CSAFPID-5965240", "CSAFPID-5965241", "CSAFPID-5965242", "CSAFPID-5965243", "CSAFPID-5965244", "CSAFPID-5965245", "CSAFPID-5965246", "CSAFPID-5965247", "CSAFPID-5965248", "CSAFPID-5965249", "CSAFPID-5965250", "CSAFPID-5965251", "CSAFPID-5965252", "CSAFPID-5965254", "CSAFPID-5965255", "CSAFPID-5965256", "CSAFPID-5965257", "CSAFPID-5965258", "CSAFPID-5965267", "CSAFPID-5965311", "CSAFPID-6020379", "CSAFPID-6020380", "CSAFPID-6020381", "CSAFPID-6020382", "CSAFPID-6020383", "CSAFPID-6020384", "CSAFPID-6020386", "CSAFPID-6020387", "CSAFPID-6020388", "CSAFPID-6020391", "CSAFPID-6020392", "CSAFPID-6020394", "CSAFPID-6488405", "CSAFPID-6697006", "CSAFPID-6697008", "CSAFPID-8521636", "CSAFPID-8521637", "CSAFPID-9164393", "CSAFPID-9164394", "CSAFPID-9550471" ] } ], "title": "CVE-2026-20519" } ] }