Hero Banner DESKTOP 1920X677

    June 2026
    Product Security Bulletin

    Published 2026-06-01

    The MediaTek Product Security Bulletin contains details of security vulnerabilities affecting certain MediaTek chipsets. Device OEMs have been notified of all the issues and the corresponding security patches for at least two months before publication. We take the security of our chipsets and our customers' products very seriously. At this time, we are not aware of any active exploitation of these vulnerabilities in the wild.
    The severity of the identified vulnerabilities was conducted based on the Common Vulnerability Scoring System version 3.1 (CVSS v3.1).

    The MediaTek Product Security Bulletin contains details of security vulnerabilities affecting certain MediaTek chipsets. Device OEMs have been notified of all the issues and the corresponding security patches for at least two months before publication. We take the security of our chipsets and our customers' products very seriously. At this time, we are not aware of any active exploitation of these vulnerabilities in the wild.

    The severity of the identified vulnerabilities was conducted based on the Common Vulnerability Scoring System version 3.1 (CVSS v3.1).

    Summary

    Severity CVEs
    High CVE-2026-20452, CVE-2026-20453, CVE-2026-20454, CVE-2026-20455
    Medium CVE-2026-20456

    Details

    CVE CVE-2026-20452
    Subcomponent wlan
    Severity High
    CWE CWE-122 Heap Overflow
    Description There is a possible memory corruption due to a heap buffer overflow.
    Affected Chipsets MT6890, MT7615, MT7915, MT7916, MT7981, MT7986, MT7990, MT7992, MT7993
    Report Source External

    CVE CVE-2026-20453
    Subcomponent geniezone
    Severity High
    CWE CWE-787 Out-of-bounds Write
    Description There is a possible out of bounds write due to a missing bounds check.
    Affected Chipsets MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8791T, MT8793, MT8797, MT8798, MT8910
    Report Source External

    CVE CVE-2026-20454
    Subcomponent geniezone
    Severity High
    CWE CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
    Description There is a possible out of bounds write due to a race condition.
    Affected Chipsets MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8791T, MT8793, MT8797, MT8798, MT8910
    Report Source External

    CVE CVE-2026-20455
    Subcomponent geniezone
    Severity High
    CWE CWE-787 Out-of-bounds Write
    Description There is a possible out of bounds write due to a missing bounds check.
    Affected Chipsets MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT8673, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8791T, MT8793, MT8797, MT8798, MT8910
    Report Source External

    CVE CVE-2026-20456
    Subcomponent wlan
    Severity Medium
    CWE CWE-787 Out-of-bounds Write
    Description There is a possible system crash due to a missing bounds check.
    Affected Chipsets MT7902, MT7920, MT7921, MT7922, MT7925, MT7927
    Report Source External

    Versions

    Version Date Description
    1.0 June 1, 2026 Bulletin published.

    Notes

    Information above is generated only at the time of creation of this Security Bulletin. The list of affected chipsets could be not complete. For any further information, device OEMs can reach your MediaTek contact person if needed.
     
    If you want to report a security vulnerability in MediaTek chipsets or products, please go to Report Security Vulnerability page on MediaTek website.

    Notes

    Information above is generated only at the time of creation of this Security Bulletin. The list of affected chipsets could be not complete. For any further information, device OEMs can reach your MediaTek contact person if needed.
    If you want to report a security vulnerability in MediaTek chipsets or products, please go to Report Security Vulnerability page on MediaTek website.