CVE-2026-20551

MEDIUM 5.5CVE-2026-20551 · Published 02/11/2026 · updated 02/11/2026

In short

CVE-2026-20551 is a MEDIUM (CVSS 5.5) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.13%, higher than 2.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11309305; Issue ID: MSV-10730.

References

mediatek.com/product-security-bulletin/November-2026

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free