EUVD-2026-52083

In wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: BORA00154903; Issue ID: MSV-7575...

CVE-2026-20493

CVE-2026-20493 affects the wifi component. The issue is an out-of-bounds write caused by a missing bounds check, enabling local denial of service when an attacker already has System privileges; no user interaction is required. The available references note Patch ID BORA00154903 and Issue ID MSV-7...

EUVD-2026-52081

In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981478 Note: For MT6890, MT6990, MT6988 / AUTO00851173 Note: For...

CVE-2026-20491

The CVE-2026-20491 entry describes a vulnerability in “med” where an out-of-bounds write results from an incorrect bounds check. Impact is local denial of service with privileges of the user, and exploitation does not require user interaction. Affected platforms are indicated by patch references:...

CVE-2026-20485

CVE-2026-20485 affects HFRP. The issue is an out-of-bounds write caused by a missing bounds check, enabling local privilege escalation for an attacker who already has System privileges. Exploitation requires no user interaction. Patch ID ALPS11049569 (Issue MSV-7931) is available. The connected d...

EUVD-2026-52076

In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11049569; Issue ID: MSV-7931...

CVE-2026-20481

CVE-2026-20481 affects the geniezone component, with an out-of-bounds write caused by a missing bounds check. The impact is local escalation of privilege if an attacker already has the System privilege, and exploitation requires no user interaction. The available references indicate a patch ident...

EUVD-2026-52070

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965550 / ALPS11393405; Issue ID:...

CVE-2026-20480

In Audio HAL, CVE-2026-20480 describes a heap-based out-of-bounds write that can cause local denial of service with user privileges. The vulnerability requires no user interaction to exploit. Affected MT series devices reference patches ALPS10960023 (MT6880/6890/6980D/6988/6990) and AUTO00851189 ...

CVE-2026-20478

In the Audio HAL, this CVE describes an out-of-bounds write caused by a heap buffer overflow, leading to local denial of service with user-privilege execution and no user interaction required. Public exploit details are not provided in the documents. Remediation is indicated by patches ALPS109814...

CVE-2026-20477

CVE-2026-20477 describes an out-of-bounds write in display caused by a missing bounds check, enabling local privilege escalation for an attacker already with System privileges; exploitation does not require user interaction. Patch available: ALPS11009963 (Issue MSV-7658). No vendor/product specif...

EUVD-2026-52064

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748...

CVE-2026-20472

CVE-2026-20472 affects TFA. The issue is an out-of-bounds write caused by a missing bounds check, leading to local denial of service if an attacker has System privileges; no user interaction is required. Patch ALPS10991467 (MSV-7764) is referenced. Public details in connected documents confirm th...

EUVD-2026-52061

In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10991467; Issue ID: MSV-7764...

EUVD-2026-52060

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10991588 Note:...

CVE-2026-20464

Summary: CVE-2026-20464 affects the hevc decoder. An out-of-bounds write caused by an integer overflow could allow remote escalation of privilege to System level without user interaction. The issue is tied to the patch ALPS11104718 and Issue MSV-8297. Details from sources: The vulnerability is de...

EUVD-2026-51680

Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

vim security update

An update is available for vim. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Vim Vi IMproved is an updated and improved version of the vi editor. Security...

CVE-2026-34641

CVE-2026-34641 (Premiere Pro) is an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. This is supported by NVD and CVE listings that describe Prem...

vim security update

An update is available for vim. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Vim Vi IMproved is an updated and improved version of the vi editor. Security...