Vulnerability Details CVE-2026-20492
In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960026 (Note: For MT6880, MT6890, MT6990, MT6988) / AUTO00851250 (Note: For MT2735, MT2737); Issue ID: MSV-7583.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 0.3%
CVSS Severity
CVSS v3 Score 5.5
Products affected by CVE-2026-20492
-
cpe:2.3:h:mediatek:mt2735:-
-
cpe:2.3:h:mediatek:mt6880:-
-
cpe:2.3:h:mediatek:mt6890:-
-
cpe:2.3:h:mediatek:mt6988:-
-
cpe:2.3:h:mediatek:mt6990:-
-
cpe:2.3:o:mediatek:mt2735_firmware:-
-
cpe:2.3:o:mediatek:mt2737_firmware:-
-
cpe:2.3:o:mediatek:mt6880_firmware:-
-
cpe:2.3:o:mediatek:mt6890_firmware:-
-
cpe:2.3:o:mediatek:mt6988_firmware:-
-
cpe:2.3:o:mediatek:mt6990_firmware:-