This vulnerability involves an out-of-bounds write in the secure boot process of MediaTek MT6813 chipsets caused by an integer overflow. An attacker with physical access and user execution privileges can exploit this flaw to trigger a local denial of service condition. The vulnerability is identified as CWE-787 and has been assigned CVE-2026-20446. There is no public information on active exploitation or an official remediation level. The patch ID referenced is ALPS09963054, but no direct patch link or vendor advisory is provided.

Successful exploitation can result in a local denial of service on devices using the affected MediaTek chipset. The attacker must have physical access and user-level privileges, limiting the scope of impact. There is no indication of remote exploitation or privilege escalation. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official remediation level or patch link is provided, users should monitor MediaTek advisories for updates. Physical access restrictions and limiting user privileges can reduce risk until a patch is available.