Search vulnerabilities

Results 187

CVE-2026-20579

In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9800.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20537

In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185225; Issue ID: MSV-9024.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20529

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11276677; Issue ID: MSV-9217.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20530

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11292777; Issue ID: MSV-9195.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20533

Integer Overflow in MediaTek Display Code Enables Local Privilege Escalation

In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11296678; Issue ID: MSV-9167.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-20535

In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185216; Issue ID: MSV-9039.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20536

In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20521

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Products
CVE-2026-20522

In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249050; Issue ID: MSV-9172.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Products
CVE-2026-20586

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Products
CVE-2026-20502

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Products
CVE-2026-20501

In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Products
CVE-2026-20474

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20475

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20477

Out‑of‑Bounds Write in MediaTek Display Code Allows Local Privilege Escalation

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20484

In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20488

In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20489

Integer Overflow in Mediatek Display Engine Enables Local Information Disclosure

In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20473

Display Memory Corruption in MediaTek Chipsets Leading to Local Privilege Escalation

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20451

In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Products