This vulnerability (CVE-2026-20490) involves an out-of-bounds read (CWE-125) in the ccci component of certain MediaTek chipsets (MT6813, MT6986, MT6988). The issue is due to a missing bounds check, which can be exploited by an attacker who already has System-level privileges on the device to cause a local denial of service. No user interaction is required for exploitation. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

The impact is limited to a local denial of service condition caused by an out-of-bounds read. The attacker must already have System privileges, so the vulnerability does not elevate privileges or compromise confidentiality or integrity. There is no indication of remote exploitation or user interaction needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is provided in the available data. Users should monitor MediaTek advisories for updates and apply patches once available.