Skip to content
OpenAdvisories
Medium · 6.7 CVE-2026-20572 EUVD-2026-115037GHSA-25v4-hmmx-33jx

In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a maliciou…

Published Nov 2, 2026 · Updated Nov 3, 2026 · Assigned by MediaTek

Description

In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431442; Issue ID: MSV-9924.

Affected products

VendorProductAffectedFixed
MediaTek MediaTek chipset MT6858, MT6878, MT6881, MT6897, MT6899, MT6989, MT6991, MT6993, MT8168, MT8186, MT8188, MT8189, MT8195, MT8196, MT8365, MT8367, MT8390, MT8391, MT8668, MT8678, MT8793 —

References