CVE-2026-20456
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Vulnerability in the WLAN STA driver on Android (MediaTek chipset) allows a system crash due to a missing bounds check, leading to local denial of service.
Risk Assessment
An attacker with user privileges can cause a system crash, leading to denial of service without user interaction.
Recommendation
Apply the WCNCR00480851 patch provided by the chipset vendor (MediaTek) as part of a software update.
Other vulnerabilities in WLAN STA driver
See all- CVE-2025-20740Medium
In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.
- CVE-2025-20728High
In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00447115; Issue ID: MSV-4276.
Original NVD description (English source)
In wlan STA driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480851; Issue ID: MSV-6338.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS