CVE-2026-20418

CRITICAL 9.8CVE-2026-20418 · Published 02/02/2026 · updated 17/06/2026

In short

CVE-2026-20418 is a CRITICAL (CVSS 9.8) vulnerability affecting matter (google).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 29.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
matter google	`≤ 1.4`	No fix yet

Description

In Thread, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465153; Issue ID: MSV-4927.

References

corp.mediatek.com/product-security-bulletin/February-2026 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free