CVE-2026-20542

The apusys component is vulnerable to a memory corruption issue caused by a use after free vulnerability (CWE-416). This flaw could enable a local escalation of privilege if a malicious actor has already acquired System privilege on the affected system. No user interaction is required for exploit...

CVE-2026-20537

A memory corruption vulnerability exists in aidl due to a use after free condition (CWE-416 ). This flaw could allow a malicious actor with System privilege to achieve local escalation of privilege . Exploitation does not require user interaction. Remediation is available via Patch ID: ALPS111852...

CVE-2026-20536

A memory corruption vulnerability exists in aidl due to a use after free condition. If a malicious actor has already obtained System privilege , they could leverage this flaw to achieve local escalation of privilege . Exploitation does not require user interaction. Remediation is available via Pa...

CVE-2026-20535

A vulnerability in aidl allows for a local escalation of privilege due to a missing permission check . An attacker who has already obtained System privilege can exploit this flaw to further escalate privileges without requiring user interaction. Remediation is available via Patch ID: ALPS11185216...

CVE-2026-20533

A vulnerability exists in the display component that allows for a local escalation of privilege due to an integer overflow (CWE-190). If a malicious actor has already obtained System privilege , they can exploit this flaw without user interaction. Remediation is available via Patch ID: ALPS112966...

CVE-2026-20531

A memory corruption vulnerability exists in apu due to a use after free condition. This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249016 (Issue ID: MSV-9169). No specific e...

CVE-2026-20530

A vulnerability in the display component allows for an out-of-bounds write due to a missing bounds check . This flaw could enable a local escalation of privilege for a malicious actor who has already obtained System privilege . No user interaction is required for exploitation. Remediation is avai...

CVE-2026-20529

A vulnerability exists in battery functionality due to a missing bounds check , leading to a possible out-of-bounds write . A malicious actor who has already obtained System privilege could leverage this flaw to achieve local escalation of privilege . Exploitation does not require user interactio...

CVE-2026-20528

The ccci component is vulnerable to an out-of-bounds write and read caused by a missing bounds check. This flaw could result in local information disclosure , memory corruption , crashes , or privilege escalation if an attacker already possesses System privilege . Exploitation requires user inter...

CVE-2026-20544

A missing bounds check in meta results in a possible out-of-bounds write . This vulnerability could allow an attacker with physical access to the device to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Pat...

CVE-2026-20588

A missing bounds check in mtee can lead to a local escalation of privilege . This vulnerability could be exploited by a malicious actor who has already obtained System privilege , and no user interaction is required. Remediation is available via Patch ID: ALPS11383899 (Issue ID: MSV-9607). No spe...

CVE-2026-20587

A type confusion vulnerability in mtee allows for a local escalation of privilege . If an attacker already possesses System privilege , they can exploit this flaw to increase their permissions without requiring user interaction. Remediation is available via Patch ID: ALPS11383899 (Issue ID: MSV-9...

CVE-2026-20579

A type confusion vulnerability in vdec leads to a possible out-of-bounds write . If a malicious actor already possesses System privilege , they could achieve a local escalation of privilege . This vulnerability does not require user interaction for exploitation. Remediation is available via Patch...

CVE-2026-20526

A vulnerability exists in the Modem component due to a missing bounds check , leading to a possible out-of-bounds write . If a User Equipment (UE) connects to a rogue base station controlled by an attacker, this could result in a remote escalation of privilege without requiring additional executi...

CVE-2026-20524

A memory corruption vulnerability exists in apu due to improper input validation (CWE-1285). This flaw could allow an attacker to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249004 (Issue...

CVE-2026-20523

A missing bounds check in neuropilot leads to a possible out-of-bounds write . This vulnerability could result in local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249062 (Issue ID: MSV-9171). No speci...

CVE-2026-20522

The software neuropilot contains an out-of-bounds write vulnerability caused by a missing bounds check. This security flaw could allow an attacker to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID:...

CVE-2026-20521

A vulnerability exists in the Video HAL component due to a missing bounds check , which can result in a stack-based buffer overflow (CWE-121). This flaw allows for a local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via P...

CVE-2026-20589

A type confusion vulnerability exists in venc , resulting in a possible out-of-bounds write . This flaw could allow a malicious actor with existing System privilege to achieve local escalation of privilege without any user interaction. Remediation is available via Patch ID: ALPS11383899 (Issue ID...

CVE-2026-20586

A vulnerability exists in vdec involving an out-of-bounds write caused by a missing bounds check . This flaw could lead to remote escalation of privilege without requiring additional execution privileges, although user interaction is necessary for exploitation. Remediation is available via Patch ...