EUVD-2026-52087

In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765...

CVE-2026-20495

In the Bluetooth driver, a missing permission check enables a local escalation of privilege with user execution privileges required and no user interaction needed. Patch ID: WCNCR00488300; Issue ID: MSV-7296. Connected documents corroborate the same details across CVE-2026-20495, NVD, CVE record,...

EUVD-2026-52084

In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10960006 / BORA00155314, BORA00155001,...

CVE-2026-20492

CVE-2026-20492 affects MediaTek Audio HAL. A race condition can cause the system to become unresponsive, yielding local denial of service with only user privileges needed and no user interaction required for exploitation. Mitigation/patches referenced: ALPS10960026 (for MT6880/6890/6990/6988) and...

EUVD-2026-52082

In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960026 Note: For MT6880, MT6890, MT6990, MT6988 / AUTO00851250...

EUVD-2026-52081

In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981478 Note: For MT6890, MT6990, MT6988 / AUTO00851173 Note: For...

CVE-2026-20491

The CVE-2026-20491 entry describes a vulnerability in “med” where an out-of-bounds write results from an incorrect bounds check. Impact is local denial of service with privileges of the user, and exploitation does not require user interaction. Affected platforms are indicated by patch references:...

EUVD-2026-52080

In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10981501; Issue ID: MSV-7669...

EUVD-2026-52078

In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757...

CVE-2026-20486

In the provided documents, CVE-2026-20486 affects the imgsensor component. The root cause is an incorrect error handling in imgsensor that can trigger an application crash, potentially enabling local escalation of privilege for an attacker already holding System privileges. Exploitation does not ...

EUVD-2026-52077

In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833...

CVE-2026-20485

CVE-2026-20485 affects HFRP. The issue is an out-of-bounds write caused by a missing bounds check, enabling local privilege escalation for an attacker who already has System privileges. Exploitation requires no user interaction. Patch ID ALPS11049569 (Issue MSV-7931) is available. The connected d...

EUVD-2026-52075

In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004...

CVE-2026-20470

CVE-2026-20470 affects the Telephony component. It is an information disclosure caused by a missing permission check, allowing local disclosure without additional execution privileges and with no user interaction required. A patch is available: ALPS11086431 (MSV-8189). Exploit details are not pro...

CVE-2026-20483

In Telephony, a vulnerability exists due to a missing permission check that could enable local privilege escalation with no additional execution privileges required and without user interaction. Affected component: Telephony. Root cause: insufficient permission validation. Impact: local privilege...

EUVD-2026-52073

In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11087526; Issue ID: MSV-8243...

EUVD-2026-52071

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965373; Issue ID: MSV-6935...

CVE-2026-20497

In geniezone, a vulnerability exists: an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege if an attacker already has System privilege. Exploitation reportedly does not require user interaction. Affected detail supports Patch IDs ALPS10965550 and ALPS113...

CVE-2026-20480

In Audio HAL, CVE-2026-20480 describes a heap-based out-of-bounds write that can cause local denial of service with user privileges. The vulnerability requires no user interaction to exploit. Affected MT series devices reference patches ALPS10960023 (MT6880/6890/6980D/6988/6990) and AUTO00851189 ...

CVE-2026-20479

In the Modem component, CVE-2026-20479 describes a vulnerability where an out-of-bounds read occurs due to a missing bounds check. This could permit remote denial of service when a UE connects to a rogue base station controlled by an attacker; exploitation requires no user interaction. The issue ...