Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00464377; Issue ID: MSV-4905.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 7 products
| Date | Total | Labels |
|---|
| 2026-02-02 | 2 | Disclosure2 |
| 2026-02-07 | 1 | Disclosure1 |
| 2026-02-10 | 1 | Disclosure1 |
⚠️ Vulnerabilidades en productos MediaTek ❗ CVE-2026-20422 ❗ CVE-2026-20407 ❗ CVE-2026-20406 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-mediatek-5/ https://t.co/RPzfckkCnk
Post summary
The post announces three newly identified CVEs affecting MediaTek products and directs readers to additional information via provided links.
CVE-2026-20407 (CVSS:9.3, CRITICAL) is Analyzed. In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local ..https://nvd.nist.gov/vuln/detail/CVE-2026-20407 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces a critical privilege‑escalation vulnerability (CVE‑2026‑20407) in the wlan STA driver, noting its CVSS score but providing no PoC, exploit code, or mitigation.
CVE-2026-20407 In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interactio... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20407
Post summary
The post announces CVE‑2026‑20407, noting a missing bounds check in the wlan STA driver that could enable local privilege escalation requiring user execution privileges.
CVE-2026-20407 In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with User execution pr… https://www.cve.org/CVERecord?id=CVE-2026-20407
Post summary
A missing bounds check in the WLAN STA driver could allow local privilege escalation; no PoC, exploit, patch, or active exploitation is reported.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | mediatek | mt7902 | - | - | - |
| HW | mediatek | mt7920 | - | - | - |
| HW | mediatek | mt7921 | - | - | - |
| HW | mediatek | mt7922 | - | - | - |
| HW | mediatek | mt7925 | - | - | - |
| HW | mediatek | mt7927 | - | - | - |
| App | mediatek | nbiot_sdk | - | - | - |