← Database

CVE-2026-20501

HIGH CVSS: 8.4 Published: 2026-09-07 Modified: 2026-09-09

Description

In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.

Affected Platforms

Mediatek Mt6779Mediatek Mt8678 FirmwareMediatek Mt6878Mediatek Mt6897Mediatek Mt6993Mediatek Mt8188 FirmwareMediatek Mt6739Mediatek Mt6833 FirmwareMediatek Mt8126 FirmwareMediatek Mt6993 Firmware

Weakness Type

CWE-122

References