CVE-2026-20486

In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833.

CVE-2026-20451

A vulnerability exists in slbc (associated with MediaTek Chipsets ) where a type confusion flaw leads to an out-of-bounds write . This vulnerability could allow a malicious actor who has already obtained System privileges to achieve local escalation of privilege . No user interaction is required ...

CVE-2026-20502

CVE-2026-20502 affects the vdec (video decoder) component in MediaTek platforms. The root cause is an out-of-bounds write resulting from a missing bounds check , which can lead to local privilege escalation requiring no additional execution privileges and no user interaction. The vulnerability is...

CVE-2026-20501

In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.