VulnSocial

CVE-2026-20452General(mediatek / mt6890)

LOWCVSS 8.0 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480138; Issue ID: MSV-6295.

mediatek CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • mt6890
  • mt6890_firmware
  • mt7615
  • mt7615_firmware

Threat summary

  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • PoC: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-06-01); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
mediatek
Products
mt6890mt6890_firmwaremt7615mt7615_firmwaremt7915mt7915_firmwaremt7916mt7916_firmwaremt7981mt7981_firmware

1 version affected across 18 products

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-06-01: 1Mentions · 2026-06-11: 1Mentions · 2026-06-17: 1Technical Details · 2026-06-01: 1Technical Details · 2026-06-17: 106-0106-1106-17
Signal classification3 categories
General
133.3%
Disclosure
133.3%
PoC
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-011
General1
2026-06-111
Disclosure1
2026-06-171
PoC1
Full discourse3 posts
  • Victor Fresk0@hacefresko
    PoC

    Two weeks ago I uploaded a post about breaking into my ISP router and finding and exploiting CVE-2026-20452, a MediaTek WPS kernel driver heap overflow. It discusses the whole journey from initial recon to achieving unauthenticated kernel RCE, so go check it out if you missed it!

    Post summary

    The author reports having exploited CVE-2026-20452 on an ISP router, sharing a post that walks through reconnaissance to achieving an unauthenticated kernel RCE, and details the heap overflow vulnerability.

    0301852.0K
    1.1K followersView on X
  • CERT-PY@CERTpy
    Disclosure

    ⚠️ Vulnerabilidades en productos MediaTek ❗ CVE-2026-20455 ❗ CVE-2026-20452 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-mediatek-8/ https://t.co/g5lfb39mor

    Post summary

    The post announces two newly disclosed CVEs affecting MediaTek products, providing a link to a page for additional information but lacking technical specifics, exploit code, or mitigation advice.

    0000092
    6.7K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-20452 Heap Buffer Overflow in WLAN AP Driver Enabling Remote Code Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20452

    Post summary

    CVE-2026-20452 describes a heap buffer overflow in a WLAN AP driver that enables remote code execution; the snippet provides no additional details on PoC, exploit, or mitigation.

    0000084
    4.0K followersView on X
CPE platform detail18 entries

18 of 18 entries

PartVendorProductVersionTarget SWTarget HW
HWmediatekmt6890---
OSmediatekmt6890_firmware---
HWmediatekmt7615---
OSmediatekmt7615_firmware---
HWmediatekmt7915---
OSmediatekmt7915_firmware---
HWmediatekmt7916---
OSmediatekmt7916_firmware---
HWmediatekmt7981---
OSmediatekmt7981_firmware---
HWmediatekmt7986---
OSmediatekmt7986_firmware---
HWmediatekmt7990---
OSmediatekmt7990_firmware---
HWmediatekmt7992---
OSmediatekmt7992_firmware---
HWmediatekmt7993---
OSmediatekmt7993_firmware---

Explore more

Back to dashboardmediatek CVEsmt6890 vulnerabilities