Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-20418

Опубликовано: 02 фев. 2026
Источник: nvd
CVSS3: 9.8
EPSS Низкий

Описание

In Thread, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465153; Issue ID: MSV-4927.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:google:matter:*:*:*:*:*:*:*:*
Версия до 1.4 (включая)

Одно из

cpe:2.3:h:mediatek:mt7931:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt7933:-:*:*:*:*:*:*:*

EPSS

Процентиль: 32%
0.00125
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 8.8
github
5 дней назад

In Thread, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465153; Issue ID: MSV-4927.

EPSS

Процентиль: 32%
0.00125
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787