CVE-2026-20510

In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11134622; Issue ID: MSV-8894...

CVE-2026-20512

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246...

CVE-2026-20509

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11165543; Issue ID: MSV-9011...

CVE-2026-20507

In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9125...

CVE-2026-20506

In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9126...

CVE-2026-20511

In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11123860; Issue ID: MSV-8890...

EUVD-2026-72210

In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10867524 / ALPS10876355; Issue ID:...

CVE-2026-20518

geniezone (a MediaTek system component) contains a missing bounds check that can lead to local information disclosure . Exploitation requires the attacker to already hold the System privilege and, per the vendor advisory, user interaction is needed. The CVSS 3.1 score is 4.4 (Medium) with a vecto...

CVE-2026-20517

geniezone is susceptible to a use-after-free flaw that enables local privilege escalation . An attacker who already holds the System privilege can exploit this bug without any user interaction to gain full confidentiality, integrity, and availability impact, scoring CVSS 3.1: 6.7 (MEDIUM) with ve...

CVE-2026-20517

In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900510; Issue ID: MSV-6781...

EUVD-2026-72209

In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900510; Issue ID: MSV-6781...

EUVD-2026-72207

In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087632; Issue ID: MSV-8244...

CVE-2026-20514

CVE-2026-20514 affects MediaTek's Audio HAL , where a missing permission check can allow a local attacker with System privilege to disclose information without user interaction. The impact is limited to confidentiality (CVSS 3.1: 4.4, Medium). The vendor references Patch ID ALPS11087632 and Issue...

EUVD-2026-72206

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245...

CVE-2026-20513

CVE-2026-20513 affects MediaTek's Audio HAL , where improper input validation can lead to a local information disclosure . An attacker must already hold the System privilege ; no user interaction is required. The vulnerability is rated CVSS 4.4 (MEDIUM) with high confidentiality impact but no int...

CVE-2026-20512

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246...

CVE-2026-20512

CVE-2026-20512 is a local privilege escalation vulnerability in MediaTek's Audio HAL component, caused by improper input validation . An attacker who already holds the System privilege can escalate further without user interaction, potentially gaining full control over confidentiality, integrity,...

EUVD-2026-72204

In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11123860; Issue ID: MSV-8890...

CVE-2026-20510

CVE-2026-20510 is a double free vulnerability in MediaTek camera middleware that can lead to local escalation of privilege for an attacker who already holds the System privilege. No user interaction is required. The CVSS v3.1 score is 6.7 (Medium) with the vector AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A...

EUVD-2026-72203

In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11134622; Issue ID: MSV-8894...