Skip to content
OpenAdvisories
High · 8.8 CVE-2026-20586 EUVD-2026-92208GHSA-32jv-4xgq-q975

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no a…

Published Oct 5, 2026 · Updated Oct 30, 2026 · Assigned by MediaTek

Vendor: MediaTek Product: MediaTek chipset

Description

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614.

Affected products

VendorProductAffectedFixed
MediaTek MediaTek chipset MT6768, MT6769, MT6789, MT6833, MT6855, MT6877, MT8771, MT8781, MT8781X, MT8786, MT8791T —

Advisories 2

References