← Database
CVE-2026-20502
HIGH
CVSS: 8.4
Published: 2026-09-07
Modified: 2026-09-09
Description
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196.
Affected Platforms
Mediatek Mt6779Mediatek Mt8678 FirmwareMediatek Mt6878Mediatek Mt6897Mediatek Mt6993Mediatek Mt8188 FirmwareMediatek Mt6739Mediatek Mt6833 FirmwareMediatek Mt8126 FirmwareMediatek Mt6993 Firmware