CVE-2026-20447

The geniezone component, associated with MediaTek Chipsets , contains a buffer error vulnerability caused by a missing bounds check . This flaw can lead to a local escalation of privilege if a malicious actor has already obtained System privilege . Exploitation does not require user interaction. ...

CVE-2026-20451

A type confusion vulnerability in slbc (associated with MediaTek Chipsets ) allows for an out-of-bounds write . This flaw could enable a malicious actor who has already obtained System privileges to achieve local escalation of privilege . Exploitation does not require user interaction. Remediatio...

CVE-2026-20502

A vulnerability exists in vdec where a missing bounds check can lead to a possible out of bounds write . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. The issue is associated with Patch ID: ALPS11262030 and Issue ID:...

CVE-2026-20501

The vdec component is vulnerable to an out of bounds write caused by a heap buffer overflow . This vulnerability could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11262030 and Issue ID: M...

CVE-2026-20586

A missing bounds check in vdec leads to a possible out-of-bounds write vulnerability. This flaw could allow for remote escalation of privilege without requiring additional execution privileges, although user interaction is required for exploitation. Remediation is available via Patch ID: ALPS1138...

CVE-2026-20589

A type confusion vulnerability in venc can lead to an out-of-bounds write . If a malicious actor has already obtained System privilege , this flaw could be exploited to achieve a local escalation of privilege . No user interaction is required for exploitation. Remediation is available via Patch I...

CVE-2026-20588

A missing bounds check in mtee allows for a possible local escalation of privilege . A malicious actor who has already obtained System privilege can exploit this vulnerability to elevate privileges further. No user interaction is required for exploitation. Remediation is available via Patch ID: A...

CVE-2026-20521

A missing bounds check in the Video HAL component can lead to a local escalation of privilege . This vulnerability allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. The vulnerability is associated with Patch ID: ALPS11375674 and ...

CVE-2026-20544

A missing bounds check in meta results in a possible out-of-bounds write . This vulnerability could allow an attacker with physical access to the device to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Pat...

CVE-2026-20579

A vulnerability in vdec allows for an out of bounds write caused by type confusion . This flaw could lead to a local escalation of privilege if an attacker has already secured System privileges. Exploitation does not require user interaction. Remediation information is available via Patch ID: ALP...

CVE-2026-20587

A type confusion vulnerability in mtee could allow for a local escalation of privilege . If a malicious actor has already obtained System privilege , they can exploit this flaw to increase their permissions further. Exploitation does not require user interaction. Remediation is available via Patc...

CVE-2026-20530

A vulnerability exists in the display component due to a missing bounds check , which can lead to an out-of-bounds write . If a malicious actor has already obtained System privilege , this could facilitate a local escalation of privilege . Exploitation does not require user interaction. Remediati...

CVE-2026-20542

The apusys component is susceptible to a memory corruption vulnerability caused by a use after free condition. If a malicious actor already possesses System privilege , they can exploit this flaw to achieve a local escalation of privilege . No user interaction is required for exploitation. Remedi...

CVE-2026-20529

A missing bounds check in the battery component can lead to an out-of-bounds write . This vulnerability allows for local escalation of privilege if a malicious actor has already obtained System privilege , and does not require user interaction. Remediation is available via Patch ID: ALPS11276677 ...