CVE-2026-46136 is a vulnerability in wifi: mt76: mt7921: fix a potential clc buffer length underflow, rated Moderate by Microsoft, with a CVSS 3.1 base score of 5.5 (Medium). An attacker can exploit it by an attacker with local access, with low privileges and without user interaction. Microsoft has not reported exploitation in the wild. The EPSS model estimates a 0.13% probability of exploitation activity in the next 30 days, higher than 3% of all scored vulnerabilities. Microsoft released the fix on 28 May 2026 in the May 2026 Patch Tuesday. It affects 1 product in 1 product family (Open Source Software).