Live › vulnerability › CVE-2026-20551
A missing bounds check in the GNSS (GPS satellite positioning) component can cause an out-of-bounds memory write. A local attacker can crash the component, causing denial of service, and no extra privileges are needed beyond user interaction.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 03:31 UTC. All times on this page are UTC.
The description names only the GNSS component and a patch ID (ALPS11309305, MSV-10730), which points to MediaTek chipset firmware or Android builds. The sources do not name affected versions, so it is unknown whether a given device is exposed. Devices with the patch applied are not affected.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11309305; Issue ID: MSV-10730.
This page as .md · .json · in your agent: get_signal("CVE-2026-20551")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.