CVE-2026-20586
HIGHCVSS 8.8Description
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614.
Timeline
Published:October 5th, 2026 2:16 AM
Last modified:October 30th, 2026 3:16 AM
CVSS Scoring
CVSS v3: 8.8 (HIGH)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Software
From NVD CPE configuration data
Vendors
mediatek
Products
mt8910_firmwaremt2718_firmwaremt6768_firmwaremt6789_firmwaremt6769_firmwaremt6833_firmwaremt6855_firmwaremt6877_firmwaremt8186_firmwaremt8188_firmwaremt8189_firmwaremt8195_firmwaremt8196_firmwaremt8367_firmwaremt8391_firmwaremt8395_firmwaremt8668_firmwaremt8676_firmwaremt8678_firmwaremt8696_firmware
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
Source: NIST NVD · Data may lag official sources by up to one minute