Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Mon, 03 Aug 2026 09:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Missing Permission Check Allows Local Information Disclosure on MediaTek Chipset |
Mon, 03 Aug 2026 04:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Mediatek, Inc.
Mediatek, Inc. mediatek Chipset |
|
| Vendors & Products |
Mediatek, Inc.
Mediatek, Inc. mediatek Chipset |
Mon, 03 Aug 2026 02:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004. | |
| Weaknesses | CWE-201 | |
| References |
|
Status: PUBLISHED
Assigner: MediaTek
Published:
Updated: 2026-08-03T02:05:48.650Z
Reserved: 2025-11-03T01:30:59.022Z
Link: CVE-2026-20484
No data.
No data.
No data.
OpenCVE Enrichment
Updated: 2026-08-03T09:00:15Z
-
CWE-201
Insertion of Sensitive Information Into Sent Data