CVE-2026-20452
High
Published: 01 June 2026
Published
01 June 2026
Modified
01 June 2026
KEV Added
—
Patch
—
CVSS Score v3.1
8.0
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.0023
13.5th percentile
Risk Priority
16
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2026-20452 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Mediatek Mt6890 Firmware. Its CVSS base score is 8.0 (High).
Operationally, ranked at the 13.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-33541
Vulnerability details
In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480138; Issue…
more
ID: MSV-6295.
- CWE(s)
Related Threats
CVEs Like This One
CVE-2025-20646Same product: Mediatek Mt6890
CVE-2025-20632Same product: Mediatek Mt7615
CVE-2025-20631Same product: Mediatek Mt7615
CVE-2026-20408Same product: Mediatek Mt6890
CVE-2025-20637Same product: Mediatek Mt7981
CVE-2025-20633Same product: Mediatek Mt7615
CVE-2026-20401Same product: Mediatek Mt6890
CVE-2026-20432Same product: Mediatek Mt6890
CVE-2026-20433Same product: Mediatek Mt6890
CVE-2024-20154Same product: Mediatek Mt6890
Affected Assets
mediatek
mt6890 firmware
all versions
mediatek
mt7615 firmware
all versions
mediatek
mt7915 firmware
all versions
mediatek
mt7916 firmware
all versions
mediatek
mt7981 firmware
all versions
mediatek
mt7986 firmware
all versions
mediatek
mt7990 firmware
all versions
mediatek
mt7992 firmware
all versions
mediatek
mt7993 firmware
all versions
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.