Skip to content
OpenAdvisories
Medium · 6.7 CVE-2026-20576 EUVD-2026-115041GHSA-4qcx-99jw-5fpf

In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malici…

Published Nov 2, 2026 · Updated Nov 3, 2026 · Assigned by MediaTek

Description

In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431385; Issue ID: MSV-9920.

Affected products

VendorProductAffectedFixed
MediaTek MediaTek chipset MT6789, MT6835, MT6855, MT6858, MT6877, MT6885, MT6886, MT6895, MT6897, MT6985, MT6988, MT6989, MT6991, MT6993 —

References