CVE-2026-20485

In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11049569; Issue ID: MSV-7931...

CVE-2026-20485

CVE-2026-20485 affects HFRP, where a missing bounds check enables an out-of-bounds write that can lead to local escalation of privilege when the attacker already has System privileges. Exploitation does not require user interaction. The weakness has a CVSSv3.1 base score of 6.0 (MEDIUM) with LOCA...

EUVD-2026-52076

In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11049569; Issue ID: MSV-7931...

CVE-2026-20481

CVE-2026-20481 affects the geniezone component. It describes an out-of-bounds write caused by a missing bounds check, allowing local escalation of privilege if the attacker already has System privileges. No user interaction is required. Patch ID: ALPS10965373; Issue ID: MSV-6935. Available connec...

CVE-2026-20481

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965373; Issue ID: MSV-6935...

EUVD-2026-52070

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965550 / ALPS11393405; Issue ID:...

CVE-2026-20497

In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10965550 / ALPS11393405; Issue ID:...

CVE-2026-20480

In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960023 Note: For MT6880, MT6890, MT6980D, MT6988, MT6990 /...

CVE-2026-20480

Summary (CVE-2026-20480): In Audio HAL, there is a possible out-of-bounds write caused by a heap buffer overflow. This could lead to local denial of service with privileges of the attacker (User) and does not require user interaction to exploit. Affected patch/identifiers: ALPS10960023 (MT6880/68...

CVE-2026-20478

CVE-2026-20478 relates to the Audio HAL and describes a possible out-of-bounds write caused by a heap buffer overflow. The identified impact is local denial of service with user execution privileges required, and exploitation does not require user interaction. The description notes patches: ALPS1...

CVE-2026-20477

CVE-2026-20477 describes a local privilege escalation flaw where an out-of-bounds write occurs due to a missing bounds check in display code. Successful exploitation could grant SYSTEM-level privileges without user interaction. The vulnerability is associated with Patch ID ALPS11009963 and Issue ...

CVE-2026-20477

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658...

EUVD-2026-52064

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748...

CVE-2026-20475

CVE-2026-20475 describes a local escalation of privilege via an out-of-bounds write in display logic caused by a missing bounds check. Exploitation requires no user interaction and can occur if the attacker already has System privileges. A patch is available (Patch ID ALPS11004276; Issue ID MSV-7...

CVE-2026-20475

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748...

CVE-2026-20472

CVE-2026-20472 describes a vulnerability in the TFA component where an out-of-bounds write results from a missing bounds check. The issue could allow local denial of service if an attacker already has System privileges, with no user interaction required. A patch is available (Patch ID: ALPS109914...

CVE-2026-20472

In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10991467; Issue ID: MSV-7764...

EUVD-2026-52061

In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10991467; Issue ID: MSV-7764...

CVE-2026-20471

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10991588 Note:...

EUVD-2026-52060

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10991588 Note:...