IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-04-07 04:17

MODIFIED

2026-04-07 04:17

EPSS (Prob. Exploit)

0.19%

Top 90.8%

DATA SOURCES:

NVD 🔗 2026-04-07 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-08

> DESCRIPTION

In sec boot, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service, if an attacker has physical access to the device, with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09963054; Issue ID: MSV-3899.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-787

> CWE DETAILED DESCRIPTIONS

CWE-787: Out-of-bounds Write - The product writes data past the end, or before the beginning, of the intended buffer.

> HISTORIQUE DES MODIFICATIONS

Première apparition

07/04/2026 04:17

Source: NVD

📊 ENRICHISSEMENT 01/05/2026 06:01

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur:

CWE-787: Out-of-bounds Write - The product writes data past the end, or before the beginning, of the intended buffer.

Total des modifications: 1 Dernière mise à jour: 6 months ago

> REFERENCES

https://corp.mediatek.com/product-security-bulletin/April-2026