Octobre 2026
11 CVE
-
CVE-2026-20586 8.8 Élevée
MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt2718 firmware · Mediatek mt6768 firmware
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614.
-
CVE-2026-20544 6.8 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt6739 firmware · Mediatek mt6761 firmware
In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.
-
CVE-2026-20537 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt6878 firmware · Mediatek mt6881 firmware · Mediatek mt6899 firmware
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185225; Issue ID: MSV-9024.
-
CVE-2026-20536 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt6878 firmware · Mediatek mt6881 firmware · Mediatek mt6899 firmware
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038.
-
CVE-2026-20535 6.7 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt6878 firmware · Mediatek mt6881 firmware
In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185216; Issue ID: MSV-9039.
-
CVE-2026-20532 6.2 Moyenne
MediaTek, Inc. MediaTek chipset · Mediatek mt6899 firmware · Mediatek mt6993 firmware · Mediatek mt8668 firmware
In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249024; Issue ID: MSV-9168.
-
CVE-2026-20531 8.4 Élevée
MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt6899 firmware · Mediatek mt6993 firmware
In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249016; Issue ID: MSV-9169.
-
CVE-2026-20524 8.4 Élevée
MediaTek, Inc. MediaTek chipset · Mediatek mt6899 firmware · Mediatek mt6993 firmware · Mediatek mt8668 firmware
In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170.
-
CVE-2026-20523 8.4 Élevée
MediaTek, Inc. MediaTek chipset · Mediatek mt6881 firmware · Mediatek mt6993 firmware · Mediatek mt8188 firmware
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249062; Issue ID: MSV-9171.
-
CVE-2026-20522 8.4 Élevée
MediaTek, Inc. MediaTek chipset · Mediatek mt6881 firmware · Mediatek mt6993 firmware · Mediatek mt8188 firmware
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249050; Issue ID: MSV-9172.
-
CVE-2026-20521 8.4 Élevée
MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt2718 firmware · Mediatek mt6768 firmware
In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.