CVE-2026-20586

Summary

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614.

Affected Software

VendorProductVersion RangeStatus
MediaTek, Inc.MediaTek chipsetMT2718affected
MediaTek, Inc.MediaTek chipsetMT6768affected
MediaTek, Inc.MediaTek chipsetMT6769affected
MediaTek, Inc.MediaTek chipsetMT6789affected
MediaTek, Inc.MediaTek chipsetMT6833affected
MediaTek, Inc.MediaTek chipsetMT6855affected
MediaTek, Inc.MediaTek chipsetMT6877affected
MediaTek, Inc.MediaTek chipsetMT8186affected
MediaTek, Inc.MediaTek chipsetMT8188affected
MediaTek, Inc.MediaTek chipsetMT8189affected
MediaTek, Inc.MediaTek chipsetMT8195affected
MediaTek, Inc.MediaTek chipsetMT8196affected
MediaTek, Inc.MediaTek chipsetMT8367affected
MediaTek, Inc.MediaTek chipsetMT8391affected
MediaTek, Inc.MediaTek chipsetMT8395affected
MediaTek, Inc.MediaTek chipsetMT8668affected
MediaTek, Inc.MediaTek chipsetMT8676affected
MediaTek, Inc.MediaTek chipsetMT8678affected
MediaTek, Inc.MediaTek chipsetMT8696affected
MediaTek, Inc.MediaTek chipsetMT8781affected
MediaTek, Inc.MediaTek chipsetMT8788Eaffected
MediaTek, Inc.MediaTek chipsetMT8792affected
MediaTek, Inc.MediaTek chipsetMT8793affected
MediaTek, Inc.MediaTek chipsetMT8799affected
MediaTek, Inc.MediaTek chipsetMT8910affected

Weaknesses

  • CWE-787: CWE-787 Out-of-bounds Write

References