CVE-2026-20502

CVE-2026-20502 affects the vdec (video decoder) component in MediaTek platforms. The root cause is an out-of-bounds write resulting from a missing bounds check , which can lead to local privilege escalation requiring no additional execution privileges and no user interaction. The vulnerability is...

CVE-2026-20501

A heap buffer overflow in vdec can lead to an out of bounds write , potentially allowing for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11262030 (Issue ID: MSV-9197). Exploitation details are not ...