Veille CVE

Octobre 2026

11 CVE

  1. CVE-2026-20586 8.8 Élevée

    MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt2718 firmware · Mediatek mt6768 firmware

    In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614.

  2. CVE-2026-20544 6.8 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt6739 firmware · Mediatek mt6761 firmware

    In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.

  3. CVE-2026-20537 6.7 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt6878 firmware · Mediatek mt6881 firmware · Mediatek mt6899 firmware

    In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185225; Issue ID: MSV-9024.

  4. CVE-2026-20536 6.7 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt6878 firmware · Mediatek mt6881 firmware · Mediatek mt6899 firmware

    In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038.

  5. CVE-2026-20535 6.7 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt6878 firmware · Mediatek mt6881 firmware

    In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185216; Issue ID: MSV-9039.

  6. CVE-2026-20532 6.2 Moyenne

    MediaTek, Inc. MediaTek chipset · Mediatek mt6899 firmware · Mediatek mt6993 firmware · Mediatek mt8668 firmware

    In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249024; Issue ID: MSV-9168.

  7. CVE-2026-20531 8.4 Élevée

    MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt6899 firmware · Mediatek mt6993 firmware

    In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249016; Issue ID: MSV-9169.

  8. CVE-2026-20524 8.4 Élevée

    MediaTek, Inc. MediaTek chipset · Mediatek mt6899 firmware · Mediatek mt6993 firmware · Mediatek mt8668 firmware

    In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170.

  9. CVE-2026-20523 8.4 Élevée

    MediaTek, Inc. MediaTek chipset · Mediatek mt6881 firmware · Mediatek mt6993 firmware · Mediatek mt8188 firmware

    In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249062; Issue ID: MSV-9171.

  10. CVE-2026-20522 8.4 Élevée

    MediaTek, Inc. MediaTek chipset · Mediatek mt6881 firmware · Mediatek mt6993 firmware · Mediatek mt8188 firmware

    In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249050; Issue ID: MSV-9172.

  11. CVE-2026-20521 8.4 Élevée

    MediaTek, Inc. MediaTek chipset · Mediatek mt8910 firmware · Mediatek mt2718 firmware · Mediatek mt6768 firmware

    In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.