{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-20521", "tracking": { "current_release_date": "2026-11-03T19:20:23.463382Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-20521", "initial_release_date": "2026-10-05T02:25:17.022919Z", "revision_history": [ { "date": "2026-10-05T02:25:17.022919Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| References created (1).| CWES updated (1)." }, { "date": "2026-10-05T02:25:19.005075Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-10-05T02:38:32.726773Z", "number": "3", "summary": "CWES created (1).| Products created (48).| References created (1).| Description created for source.| Unknown change." }, { "date": "2026-10-05T02:38:34.235885Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-10-05T07:34:55.566193Z", "number": "5", "summary": "NCSC Score updated." }, { "date": "2026-10-05T11:27:11.220335Z", "number": "6", "summary": "CVSS created." }, { "date": "2026-10-05T11:27:13.366415Z", "number": "7", "summary": "NCSC Score updated." }, { "date": "2026-10-06T00:41:16.908179Z", "number": "8", "summary": "Source connected.| CVE status created. (valid)| Vendor_assessment created." }, { "date": "2026-10-06T14:26:00.104763Z", "number": "9", "summary": "EPSS created.| Unknown change." }, { "date": "2026-10-08T16:42:36.793191Z", "number": "10", "summary": "Products connected (48).| Product Identifiers created (48)." }, { "date": "2026-10-08T16:42:43.537204Z", "number": "11", "summary": "NCSC Score updated." }, { "date": "2026-10-08T19:16:40.047053Z", "number": "12", "summary": "CVSS created.| Unknown change." }, { "date": "2026-10-08T19:16:42.283395Z", "number": "13", "summary": "NCSC Score updated." }, { "date": "2026-10-13T02:41:39.976491Z", "number": "14", "summary": "Source connected.| CVE status created. (valid)" }, { "date": "2026-11-03T19:20:21.226254Z", "number": "15", "summary": "Source connected.| CVE status created. (valid)| Products connected (9).| References created (6)." }, { "date": "2026-11-03T19:20:22.870122Z", "number": "16", "summary": "NCSC Score updated." } ], "status": "interim", "version": "16" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/12", "product": { "name": "vers:unknown/12", "product_id": "CSAFPID-40402", "product_identification_helper": { "cpe": "cpe:/o:google:android:12" } } }, { "category": "product_version_range", "name": "vers:unknown/13", "product": { "name": "vers:unknown/13", "product_id": "CSAFPID-40399", "product_identification_helper": { "cpe": "cpe:/o:google:android:13" } } }, { "category": "product_version_range", "name": "vers:unknown/14 <2026-11-01", "product": { "name": "vers:unknown/14 <2026-11-01", "product_id": "CSAFPID-10011178" } }, { "category": "product_version_range", "name": "vers:unknown/15 <2026-11-01", "product": { "name": "vers:unknown/15 <2026-11-01", "product_id": "CSAFPID-10011179" } }, { "category": "product_version_range", "name": "vers:unknown/16 <2026-11-01", "product": { "name": "vers:unknown/16 <2026-11-01", "product_id": "CSAFPID-10011175" } }, { "category": "product_version_range", "name": "vers:unknown/17 <2026-11-01", "product": { "name": "vers:unknown/17 <2026-11-01", "product_id": "CSAFPID-10011176" } }, { "category": "product_version_range", "name": "vers:unknown/<2026-11-05", "product": { "name": "vers:unknown/<2026-11-05", "product_id": "CSAFPID-10011174" } }, { "category": "product_version_range", "name": "vers:unknown/automotive os <2026-11-01", "product": { "name": "vers:unknown/automotive os <2026-11-01", "product_id": "CSAFPID-10011173" } }, { "category": "product_version_range", "name": "vers:unknown/xr <2026-11-01", "product": { "name": "vers:unknown/xr <2026-11-01", "product_id": "CSAFPID-10011177" } } ], "category": "product_name", "name": "Android" } ], "category": "vendor", "name": "Google" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2567506", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8695_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "MT8695 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675071", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6768_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6768_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675072", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6769_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6769_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675079", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6781_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6781_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675084", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6789_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6789_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675086", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6833_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6833_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675088", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6835_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6835_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675090", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6853_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6853_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675092", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6855_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6855_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675097", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6877_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6877_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675100", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6878_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6878_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675102", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6879_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6879_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675104", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6883_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6883_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675105", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6885_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6885_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675106", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6886_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6886_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675107", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6889_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6889_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675110", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6893_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6893_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675111", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6895_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6895_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675114", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6897_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6897_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675115", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6899_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6899_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675118", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6983_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6983_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675120", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6985_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6985_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675122", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6989_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6989_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675125", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6991_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6991_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675130", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8676_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8676_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675131", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8678_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8678_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2567507", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8696_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8696_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675136", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8781_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8781_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-2675138", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8788e_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8788e_firmware" } ], "category": "vendor", "name": "MediaTek" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/mt2718", "product": { "name": "vers:unknown/mt2718", "product_id": "CSAFPID-5965227" } }, { "category": "product_version_range", "name": "vers:unknown/mt6768", "product": { "name": "vers:unknown/mt6768", "product_id": "CSAFPID-5965182" } }, { "category": "product_version_range", "name": "vers:unknown/mt6769", "product": { "name": "vers:unknown/mt6769", "product_id": "CSAFPID-5965276" } }, { "category": "product_version_range", "name": "vers:unknown/mt6781", "product": { "name": "vers:unknown/mt6781", "product_id": "CSAFPID-5965183" } }, { "category": "product_version_range", "name": "vers:unknown/mt6789", "product": { "name": "vers:unknown/mt6789", "product_id": "CSAFPID-5965184" } }, { "category": "product_version_range", "name": "vers:unknown/mt6833", "product": { "name": "vers:unknown/mt6833", "product_id": "CSAFPID-5965185" } }, { "category": "product_version_range", "name": "vers:unknown/mt6835", "product": { "name": "vers:unknown/mt6835", "product_id": "CSAFPID-5965186" } }, { "category": "product_version_range", "name": "vers:unknown/mt6853", "product": { "name": "vers:unknown/mt6853", "product_id": "CSAFPID-5965187" } }, { "category": "product_version_range", "name": "vers:unknown/mt6855", "product": { "name": "vers:unknown/mt6855", "product_id": "CSAFPID-5965188" } }, { "category": "product_version_range", "name": "vers:unknown/mt6858", "product": { "name": "vers:unknown/mt6858", "product_id": "CSAFPID-5965242" } }, { "category": "product_version_range", "name": "vers:unknown/mt6877", "product": { "name": "vers:unknown/mt6877", "product_id": "CSAFPID-5965189" } }, { "category": "product_version_range", "name": "vers:unknown/mt6878", "product": { "name": "vers:unknown/mt6878", "product_id": "CSAFPID-5965190" } }, { "category": "product_version_range", "name": "vers:unknown/mt6879", "product": { "name": "vers:unknown/mt6879", "product_id": "CSAFPID-5965191" } }, { "category": "product_version_range", "name": "vers:unknown/mt6881", "product": { "name": "vers:unknown/mt6881", "product_id": "CSAFPID-5965311" } }, { "category": "product_version_range", "name": "vers:unknown/mt6883", "product": { "name": "vers:unknown/mt6883", "product_id": "CSAFPID-5965192" } }, { "category": "product_version_range", "name": "vers:unknown/mt6885", "product": { "name": "vers:unknown/mt6885", "product_id": "CSAFPID-5965193" } }, { "category": "product_version_range", "name": "vers:unknown/mt6886", "product": { "name": "vers:unknown/mt6886", "product_id": "CSAFPID-5965194" } }, { "category": "product_version_range", "name": "vers:unknown/mt6889", "product": { "name": "vers:unknown/mt6889", "product_id": "CSAFPID-5965195" } }, { "category": "product_version_range", "name": "vers:unknown/mt6893", "product": { "name": "vers:unknown/mt6893", "product_id": "CSAFPID-5965196" } }, { "category": "product_version_range", "name": "vers:unknown/mt6895", "product": { "name": "vers:unknown/mt6895", "product_id": "CSAFPID-5965197" } }, { "category": "product_version_range", "name": "vers:unknown/mt6897", "product": { "name": "vers:unknown/mt6897", "product_id": "CSAFPID-5965198" } }, { "category": "product_version_range", "name": "vers:unknown/mt6899", "product": { "name": "vers:unknown/mt6899", "product_id": "CSAFPID-5965199" } }, { "category": "product_version_range", "name": "vers:unknown/mt6983", "product": { "name": "vers:unknown/mt6983", "product_id": "CSAFPID-5965200" } }, { "category": "product_version_range", "name": "vers:unknown/mt6985", "product": { "name": "vers:unknown/mt6985", "product_id": "CSAFPID-5965201" } }, { "category": "product_version_range", "name": "vers:unknown/mt6989", "product": { "name": "vers:unknown/mt6989", "product_id": "CSAFPID-5965202" } }, { "category": "product_version_range", "name": "vers:unknown/mt6991", "product": { "name": "vers:unknown/mt6991", "product_id": "CSAFPID-5965203" } }, { "category": "product_version_range", "name": "vers:unknown/mt6993", "product": { "name": "vers:unknown/mt6993", "product_id": "CSAFPID-5965226" } }, { "category": "product_version_range", "name": "vers:unknown/mt8126", "product": { "name": "vers:unknown/mt8126", "product_id": "CSAFPID-8926643" } }, { "category": "product_version_range", "name": "vers:unknown/mt8171", "product": { "name": "vers:unknown/mt8171", "product_id": "CSAFPID-8926644" } }, { "category": "product_version_range", "name": "vers:unknown/mt8186", "product": { "name": "vers:unknown/mt8186", "product_id": "CSAFPID-5965204" } }, { "category": "product_version_range", "name": "vers:unknown/mt8188", "product": { "name": "vers:unknown/mt8188", "product_id": "CSAFPID-5965205" } }, { "category": "product_version_range", "name": "vers:unknown/mt8189", "product": { "name": "vers:unknown/mt8189", "product_id": "CSAFPID-8926641" } }, { "category": "product_version_range", "name": "vers:unknown/mt8195", "product": { "name": "vers:unknown/mt8195", "product_id": "CSAFPID-5965312" } }, { "category": "product_version_range", "name": "vers:unknown/mt8196", "product": { "name": "vers:unknown/mt8196", "product_id": "CSAFPID-5965206" } }, { "category": "product_version_range", "name": "vers:unknown/mt8367", "product": { "name": "vers:unknown/mt8367", "product_id": "CSAFPID-5965224" } }, { "category": "product_version_range", "name": "vers:unknown/mt8391", "product": { "name": "vers:unknown/mt8391", "product_id": "CSAFPID-5965228" } }, { "category": "product_version_range", "name": "vers:unknown/mt8395", "product": { "name": "vers:unknown/mt8395", "product_id": "CSAFPID-5965314" } }, { "category": "product_version_range", "name": "vers:unknown/mt8668", "product": { "name": "vers:unknown/mt8668", "product_id": "CSAFPID-5965252" } }, { "category": "product_version_range", "name": "vers:unknown/mt8676", "product": { "name": "vers:unknown/mt8676", "product_id": "CSAFPID-5965209" } }, { "category": "product_version_range", "name": "vers:unknown/mt8678", "product": { "name": "vers:unknown/mt8678", "product_id": "CSAFPID-5965210" } }, { "category": "product_version_range", "name": "vers:unknown/mt8695", "product": { "name": "vers:unknown/mt8695", "product_id": "CSAFPID-5965267" } }, { "category": "product_version_range", "name": "vers:unknown/mt8696", "product": { "name": "vers:unknown/mt8696", "product_id": "CSAFPID-5965229" } }, { "category": "product_version_range", "name": "vers:unknown/mt8781", "product": { "name": "vers:unknown/mt8781", "product_id": "CSAFPID-5965215" } }, { "category": "product_version_range", "name": "vers:unknown/mt8788e", "product": { "name": "vers:unknown/mt8788e", "product_id": "CSAFPID-5965230" } }, { "category": "product_version_range", "name": "vers:unknown/mt8792", "product": { "name": "vers:unknown/mt8792", "product_id": "CSAFPID-5965217" } }, { "category": "product_version_range", "name": "vers:unknown/mt8793", "product": { "name": "vers:unknown/mt8793", "product_id": "CSAFPID-5965218" } }, { "category": "product_version_range", "name": "vers:unknown/mt8799", "product": { "name": "vers:unknown/mt8799", "product_id": "CSAFPID-8926642" } }, { "category": "product_version_range", "name": "vers:unknown/mt8910", "product": { "name": "vers:unknown/mt8910", "product_id": "CSAFPID-5965264" } } ], "category": "product_name", "name": "MediaTek chipset" } ], "category": "vendor", "name": "MediaTek, Inc." }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6697005", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt2718_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt2718_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6697006", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6858_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6858_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-9164394", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6881_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6881_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6020392", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt6993_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt6993_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-9009567", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8126_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8126_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-9009568", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8171_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8171_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6696995", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8186_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8186_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6696996", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8188_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8188_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-9009569", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8189_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8189_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-9164396", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8195_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8195_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6696997", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8196_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8196_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6696998", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8367_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8367_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6697002", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8391_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8391_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6697003", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8395_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8395_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6020379", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8668_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8668_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6020383", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8792_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8792_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6020384", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8793_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8793_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-9009570", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8799_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8799_firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-6697004", "product_identification_helper": { "cpe": "cpe:2.3:o:mediatek:mt8910_firmware:-:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "mt8910_firmware" } ], "category": "vendor", "name": "mediatek" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-20521", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-20521" }, { "category": "description", "text": "In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-20521" }, { "category": "other", "text": "0.00133", "title": "EPSS" }, { "category": "other", "text": "6.2", "title": "NCSC Score" }, { "category": "other", "text": "There is product data available from source Certbundde, Is related to (a version of) product Android", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "Is related to (a version of) an uncommon product", "title": "NCSC Score top decreasing factors" }, { "category": "details", "text": "Severity: 3\n", "title": "Vendor assessment" } ], "product_status": { "known_affected": [ "CSAFPID-5965227", "CSAFPID-5965182", "CSAFPID-5965276", "CSAFPID-5965183", "CSAFPID-5965184", "CSAFPID-5965185", "CSAFPID-5965186", "CSAFPID-5965187", "CSAFPID-5965188", "CSAFPID-5965242", "CSAFPID-5965189", "CSAFPID-5965190", "CSAFPID-5965191", "CSAFPID-5965311", "CSAFPID-5965192", "CSAFPID-5965193", "CSAFPID-5965194", "CSAFPID-5965195", "CSAFPID-5965196", "CSAFPID-5965197", "CSAFPID-5965198", "CSAFPID-5965199", "CSAFPID-5965200", "CSAFPID-5965201", "CSAFPID-5965202", "CSAFPID-5965203", "CSAFPID-5965226", "CSAFPID-8926643", "CSAFPID-8926644", "CSAFPID-5965204", "CSAFPID-5965205", "CSAFPID-8926641", "CSAFPID-5965312", "CSAFPID-5965206", "CSAFPID-5965224", "CSAFPID-5965228", "CSAFPID-5965314", "CSAFPID-5965252", "CSAFPID-5965209", "CSAFPID-5965210", "CSAFPID-5965267", "CSAFPID-5965229", "CSAFPID-5965215", "CSAFPID-5965230", "CSAFPID-5965217", "CSAFPID-5965218", "CSAFPID-8926642", "CSAFPID-5965264", "CSAFPID-2567506", "CSAFPID-2567507", "CSAFPID-2675071", "CSAFPID-2675072", "CSAFPID-2675079", "CSAFPID-2675084", "CSAFPID-2675086", "CSAFPID-2675088", "CSAFPID-2675090", "CSAFPID-2675092", "CSAFPID-2675097", "CSAFPID-2675100", "CSAFPID-2675102", "CSAFPID-2675104", "CSAFPID-2675105", "CSAFPID-2675106", "CSAFPID-2675107", "CSAFPID-2675110", "CSAFPID-2675111", "CSAFPID-2675114", "CSAFPID-2675115", "CSAFPID-2675118", "CSAFPID-2675120", "CSAFPID-2675122", "CSAFPID-2675125", "CSAFPID-2675130", "CSAFPID-2675131", "CSAFPID-2675136", "CSAFPID-2675138", "CSAFPID-6020379", "CSAFPID-6020383", "CSAFPID-6020384", "CSAFPID-6020392", "CSAFPID-6696995", "CSAFPID-6696996", "CSAFPID-6696997", "CSAFPID-6696998", "CSAFPID-6697002", "CSAFPID-6697003", "CSAFPID-6697004", "CSAFPID-6697005", "CSAFPID-6697006", "CSAFPID-9009567", "CSAFPID-9009568", "CSAFPID-9009569", "CSAFPID-9009570", "CSAFPID-9164394", "CSAFPID-9164396", "CSAFPID-40399", "CSAFPID-40402", "CSAFPID-10011173", "CSAFPID-10011174", "CSAFPID-10011175", "CSAFPID-10011176", "CSAFPID-10011177", "CSAFPID-10011178", "CSAFPID-10011179" ] }, "references": [ { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4288.json" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20521" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-20521" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-20521" }, { "category": "external", "summary": "Source - samsung", "url": "https://security.samsungmobile.com/securityUpdate.smsb" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss" }, { "category": "external", "summary": "Source - hkcert", "url": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20261013" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4288.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4288" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://source.android.com/docs/security/bulletin/2026/2026-11-01" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://aviatrix.ai/threat-research-center/android-sms-of-death-cve-2026-58882-remote-dos-unpatched-phones/" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://source.android.com/docs/security/bulletin/aaos/2026/2026-11-01" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://source.android.com/docs/security/bulletin/xr/2026/2026-11-01" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://www.mediatek.com/product-security-bulletin/October-2026" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.4, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-10011173", "CSAFPID-10011174", "CSAFPID-10011175", "CSAFPID-10011176", "CSAFPID-10011177", "CSAFPID-10011178", "CSAFPID-10011179", "CSAFPID-2567506", "CSAFPID-2567507", "CSAFPID-2675071", "CSAFPID-2675072", "CSAFPID-2675079", "CSAFPID-2675084", "CSAFPID-2675086", "CSAFPID-2675088", "CSAFPID-2675090", "CSAFPID-2675092", "CSAFPID-2675097", "CSAFPID-2675100", "CSAFPID-2675102", "CSAFPID-2675104", "CSAFPID-2675105", "CSAFPID-2675106", "CSAFPID-2675107", "CSAFPID-2675110", "CSAFPID-2675111", "CSAFPID-2675114", "CSAFPID-2675115", "CSAFPID-2675118", "CSAFPID-2675120", "CSAFPID-2675122", "CSAFPID-2675125", "CSAFPID-2675130", "CSAFPID-2675131", "CSAFPID-2675136", "CSAFPID-2675138", "CSAFPID-40399", "CSAFPID-40402", "CSAFPID-5965182", "CSAFPID-5965183", "CSAFPID-5965184", "CSAFPID-5965185", "CSAFPID-5965186", "CSAFPID-5965187", "CSAFPID-5965188", "CSAFPID-5965189", "CSAFPID-5965190", "CSAFPID-5965191", "CSAFPID-5965192", "CSAFPID-5965193", "CSAFPID-5965194", "CSAFPID-5965195", "CSAFPID-5965196", "CSAFPID-5965197", "CSAFPID-5965198", "CSAFPID-5965199", "CSAFPID-5965200", "CSAFPID-5965201", "CSAFPID-5965202", "CSAFPID-5965203", "CSAFPID-5965204", "CSAFPID-5965205", "CSAFPID-5965206", "CSAFPID-5965209", "CSAFPID-5965210", "CSAFPID-5965215", "CSAFPID-5965217", "CSAFPID-5965218", "CSAFPID-5965224", "CSAFPID-5965226", "CSAFPID-5965227", "CSAFPID-5965228", "CSAFPID-5965229", "CSAFPID-5965230", "CSAFPID-5965242", "CSAFPID-5965252", "CSAFPID-5965264", "CSAFPID-5965267", "CSAFPID-5965276", "CSAFPID-5965311", "CSAFPID-5965312", "CSAFPID-5965314", "CSAFPID-6020379", "CSAFPID-6020383", "CSAFPID-6020384", "CSAFPID-6020392", "CSAFPID-6696995", "CSAFPID-6696996", "CSAFPID-6696997", "CSAFPID-6696998", "CSAFPID-6697002", "CSAFPID-6697003", "CSAFPID-6697004", "CSAFPID-6697005", "CSAFPID-6697006", "CSAFPID-8926641", "CSAFPID-8926642", "CSAFPID-8926643", "CSAFPID-8926644", "CSAFPID-9009567", "CSAFPID-9009568", "CSAFPID-9009569", "CSAFPID-9009570", "CSAFPID-9164394", "CSAFPID-9164396" ] } ], "title": "CVE-2026-20521" } ] }