# CVE-2026-20482: MediaTek WLAN STA firmware denial of service via logging

Source: https://junglewise.ai/threats/cve-2026-20482-mediatek-wlan-sta-firmware-denial-of-service-via-logging  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-03. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-20482 · Severity: medium · CVSS 6.5 · Published 2026-08-03

MediaTek chipsets include Wi-Fi firmware used in smartphones, tablets, and IoT devices. A flaw in the Wi-Fi station firmware can cause the system to become unresponsive due to excessive or malformed logging activity, disrupting network connectivity and device operation. An attacker within wireless range can trigger this condition without user interaction, causing a denial of service.

Technologies: [MediaTek Mt7902](https://junglewise.ai/threats/technologies/mt7902), [MediaTek Mt7921](https://junglewise.ai/threats/technologies/mt7921), [MediaTek Mt7922](https://junglewise.ai/threats/technologies/mt7922). Vendors: [MediaTek](https://junglewise.ai/threats/vendors/mediatek).

## Quick answers

**Is CVE-2026-20482 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-20482 being exploited in the wild.

**How severe is CVE-2026-20482?** Medium severity, with a CVSS score of 6.5, published 3 August 2026.

**Which products and versions are affected?** MediaTek WLAN STA Firmware.

**Is there a fix for CVE-2026-20482?** A patch was published on 2026-08-03: Patch ID WCNCR00486814 available Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-20482 attacked?** It is attacked from the adjacent network.

**Am I affected by CVE-2026-20482?** Check whether you run MediaTek Mt7902, MediaTek Mt7902 Firmware, MediaTek Mt7921 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A denial-of-service vulnerability exists in the MediaTek WLAN STA (station mode) firmware logging subsystem. The flaw allows an attacker to cause system unresponsiveness by triggering excessive or malformed logging operations. The attack is adjacent/proximal (requires wireless proximity) and requires no authentication or user interaction. An attacker can exploit this to render affected Wi-Fi-enabled devices unresponsive, disrupting network availability. MediaTek has provided a patch (WCNCR00486814) and notifies device OEMs to apply updates.

## Affected products

- MediaTek WLAN STA Firmware

## Timeline

- 2026-08-03: disclosed
- 2026-08-03: patched: Patch ID WCNCR00486814 available

## References

- [https://www.mediatek.com/product-security-bulletin/August-2026](https://www.mediatek.com/product-security-bulletin/August-2026)

## Related threats

- [MediaTek Bluetooth driver permission bypass](https://junglewise.ai/threats/cve-2026-20495-mediatek-bluetooth-driver-permission-bypass)
- [In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local…](https://junglewise.ai/threats/cve-2025-20740-in-wlan-sta-driver-there-is-a-possible-out-of-bounds-read-due-to)
- [In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local…](https://junglewise.ai/threats/cve-2025-20728-in-wlan-sta-driver-there-is-a-possible-out-of-bounds-write-due-to)