CVE-2026-20536

6.7 Moyenne

Publiée le 05/10/2026 à 04:16 · Modifiée le 09/10/2026 à 16:27 · Analysée par le NVD · Source : security@mediatek.com

Description

In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038.

Traduire en français

Produits concernés

MediaTek, Inc. MediaTek chipset
Mediatek mt6878 firmware
Mediatek mt6881 firmware
Mediatek mt6899 firmware
Mediatek mt6989 firmware
Mediatek mt6991 firmware
Mediatek mt6993 firmware
Mediatek mt8188 firmware
Mediatek mt8189 firmware
Mediatek mt8668 firmware
Mediatek mt8695 firmware
Mediatek mt8696 firmware
Mediatek mt8781 firmware
Mediatek mt8910 firmware

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.7 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-416

Références

https://www.mediatek.com/product-security-bulletin/October-2026 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories