CVE-2026-20498

In geniezone, a missing permission check enables local escalation of privilege if an attacker already has System privileges. This vulnerability does not require user interaction. A patch identified as ALPS10900493 (Issue MSV-6765) is available to address the issue. The available connected records...

EUVD-2026-52087

In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765...

EUVD-2026-52085

In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00488300; Issue ID: MSV-7296...

EUVD-2026-52084

In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10960006 / BORA00155314, BORA00155001,...

EUVD-2026-52083

In wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: BORA00154903; Issue ID: MSV-7575...

CVE-2026-20492

CVE-2026-20492 affects MediaTek Audio HAL. A race condition can cause the system to become unresponsive, yielding local denial of service with only user privileges needed and no user interaction required for exploitation. Mitigation/patches referenced: ALPS10960026 (for MT6880/6890/6990/6988) and...

EUVD-2026-52082

In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960026 Note: For MT6880, MT6890, MT6990, MT6988 / AUTO00851250...

CVE-2026-20491

The CVE-2026-20491 entry describes a vulnerability in “med” where an out-of-bounds write results from an incorrect bounds check. Impact is local denial of service with privileges of the user, and exploitation does not require user interaction. Affected platforms are indicated by patch references:...

CVE-2026-20490

CVE-2026-20490 affects the MediaTek ccci component. The issue is a missing bounds check that can cause an out-of-bounds read, potentially enabling local denial of service when an attacker already has System privileges. Exploitation details are not provided in the documents; user interaction is no...

EUVD-2026-52080

In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10981501; Issue ID: MSV-7669...

EUVD-2026-52079

In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749...

CVE-2026-20488

CVE-2026-20488 : The description notes a missing bounds check in the display path that can lead to local information disclosure when the attacker already has System privileges, with no user interaction required. A patch is listed: ALPS11004276 (Issue MSV-7757). The connected documents do not spec...

EUVD-2026-52078

In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757...

EUVD-2026-52077

In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833...

EUVD-2026-52076

In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11049569; Issue ID: MSV-7931...

EUVD-2026-52074

In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11086431; Issue ID: MSV-8189...

EUVD-2026-52073

In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11087526; Issue ID: MSV-8243...

CVE-2026-20482

In WLAN STA FW, a vulnerability arises where excessive logging can make the system unresponsive, enabling remote (proximal/adjacent) denial of service without requiring user interaction or additional privileges. The issue is identified with Patch ID: WCNCR00486814 and Issue ID: MSV-6824. The avai...

EUVD-2026-52071

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965373; Issue ID: MSV-6935...

CVE-2026-20481

CVE-2026-20481 affects the geniezone component, with an out-of-bounds write caused by a missing bounds check. The impact is local escalation of privilege if an attacker already has the System privilege, and exploitation requires no user interaction. The available references indicate a patch ident...