CVE-2026-20409

The imgsys component in MediaTek Chipsets contains an out-of-bounds write vulnerability caused by a missing bounds check . A malicious actor who has already obtained System privileges could exploit this flaw to achieve a local escalation of privilege . Exploitation does not require user interacti...