IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-08-03 03:16

MODIFIED

2026-08-03 03:16

EPSS (Prob. Exploit)

0.17%

Top 94.2%

DATA SOURCES:

NVD 🔗 2026-08-03 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-01

> DESCRIPTION

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: AUTO00845351 (Note: For MT2737) / ALPS11072643 (Note: For MT6880, MT6890, MT6990); Issue ID: MSV-6929.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-787

> CWE DETAILED DESCRIPTIONS

CWE-787: Out-of-bounds Write - The product writes data past the end, or before the beginning, of the intended buffer.

> HISTORIQUE DES MODIFICATIONS

Première apparition

03/08/2026 03:16

Source: NVD

📊 ENRICHISSEMENT 01/09/2026 06:02

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur:

CWE-787: Out-of-bounds Write - The product writes data past the end, or before the beginning, of the intended buffer.

Total des modifications: 1 Dernière mise à jour: 2 months ago

> REFERENCES

https://www.mediatek.com/product-security-bulletin/August-2026