MediaTek MT Chipset Security Advisory: Heap Overflow, OOB Write, Race Condition CVEs

Vulnerability Overview Release Date: June 1, 2026 Vulnerability Types: - CVE-2026-20452: Heap Overflow - CVE-2026-20453: Out-of-bounds Write - CVE-2026-20454: Race Condition - CVE-2026-20455: Out-of-bounds Write - CVE-2026-20456: Out-of-bounds Write Affected Products Affected Chipsets: - CVE-2026-20452: MT6890, MT7615, MT7915, MT7916, MT7981, MT7986, MT7990, MT7992, MT7993 - CVE-2026-20453: MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT6993, MT7673, MT7675, MT7676, MT7678, MT7871, MT7876, MT7878, MT7879, MT7881, MT7886, MT7888, MT7891, MT7893, MT7897, MT7898, MT7899 - CVE-2026-20454: MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT6993, MT7673, MT7675, MT7676, MT7678, MT7871, MT7876, MT7878, MT7879, MT7881, MT7886, MT7888, MT7891, MT7893, MT7897, MT7898, MT7899 - CVE-2026-20455: MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT6993, MT7673, MT7675, MT7676, MT7678, MT7871, MT7876, MT7878, MT7879, MT7881, MT7886, MT7888, MT7891, MT7893, MT7897, MT7898, MT7899 - CVE-2026-20456: MT7902, MT7920, MT7921, MT7922, MT7925, MT7927 Remediation Remediation Measures: MediaTek has notified all device OEMs and will provide corresponding security patches at least two months before their release. Report Source: All vulnerabilities were reported externally. Notes Version Information: - Version: 1.0 - Date: June 1, 2026 - Description: Release of Security Advisory Precautions: - The list of affected chipsets may be incomplete. - For further information, please contact MediaTek personnel. - To report security vulnerabilities, please visit the "Report a Security Vulnerability" page on the MediaTek website. Code Blocks No POC code or exploit code is included in this document.

Goal Reached Thanks to every supporter — we hit 100%!

MediaTek MT Chipset Security Advisory: Heap Overflow, OOB Write, Race Condition CVEs