CVE-2026-20454

A race condition within the geniezone mechanism in MediaTek Chipsets can lead to an out of bounds write . If a malicious actor has already obtained System privilege , this vulnerability can be exploited to achieve a local escalation of privilege . Exploitation does not require user interaction. R...

CVE-2026-20455

The geniezone component in MediaTek Chipsets contains a security vulnerability caused by a missing bounds check , which allows for an out-of-bounds write . If a malicious actor has already obtained System privilege , they can exploit this flaw to achieve local escalation of privilege . Exploitati...

CVE-2026-20453

MediaTek Chipsets are susceptible to an out-of-bounds write vulnerability in the geniezone component caused by a missing bounds check. This security flaw could enable a local escalation of privilege if an attacker already possesses System privileges. Exploitation does not require user interaction...

CVE-2026-20498

The geniezone software is vulnerable to a local escalation of privilege caused by a missing permission check . This vulnerability allows an attacker who has already obtained System privilege to escalate their privileges further without requiring user interaction. To remediate this issue, users sh...

CVE-2026-20481

A missing bounds check in geniezone leads to a possible out of bounds write . This vulnerability could allow a malicious actor who has already obtained System privilege to achieve a local escalation of privilege . Exploitation does not require user interaction. Remediation is available via Patch ...

CVE-2026-20473

A memory corruption vulnerability exists in Microsoft Display due to a use after free condition. This flaw allows for local escalation of privilege if an attacker has already obtained System privilege . Exploitation does not require user interaction. Remediation is available via Patch ID: ALPS110...

CVE-2026-20475

A vulnerability exists in the display component due to a missing bounds check , which can result in an out of bounds write . If a malicious actor has already obtained System privileges , this flaw could lead to a local escalation of privilege . Exploitation does not require user interaction. Reme...

CVE-2026-20474

A race condition in the display component can lead to a local escalation of privilege . This vulnerability could be exploited by a malicious actor who has already obtained System privilege to further escalate their permissions. The exploit does not require user interaction. Remediation is availab...

CVE-2026-20447

The geniezone component, associated with MediaTek Chipsets , contains a buffer error vulnerability caused by a missing bounds check . This flaw can lead to a local escalation of privilege if a malicious actor has already obtained System privilege . Exploitation does not require user interaction. ...

CVE-2026-20486

The imgsensor component is vulnerable to an application crash caused by incorrect error handling . If a malicious actor has already obtained System privilege , this vulnerability could lead to a local escalation of privilege . Exploitation does not require user interaction. Remediation is availab...

CVE-2026-20488

A missing bounds check in the display component can lead to local information disclosure . An attacker with System privileges can exploit this vulnerability without requiring any user interaction. Remediation is available via Patch ID: ALPS11004276 (Issue ID: MSV-7757). Specific details regarding...

CVE-2026-20477

A missing bounds check in the display component can lead to an out of bounds write . This vulnerability could allow a malicious actor who has already obtained System privilege to achieve a local escalation of privilege . Exploitation does not require user interaction. Remediation is available via...

CVE-2026-20496

The geniezone component is vulnerable to an out of bounds read due to a missing bounds check. An attacker who has already obtained System privilege can exploit this to cause local information disclosure . No user interaction is required for exploitation. Remediation is available via Patch ID: ALP...

CVE-2026-20489

A vulnerability in the display component allows for local information disclosure due to an integer overflow . An attacker who has already obtained System privileges can exploit this flaw without requiring any user interaction. Remediation is available via Patch ID: ALPS11004274 (Issue ID: MSV-774...

CVE-2026-20451

A type confusion vulnerability in slbc (associated with MediaTek Chipsets ) allows for an out-of-bounds write . This flaw could enable a malicious actor who has already obtained System privileges to achieve local escalation of privilege . Exploitation does not require user interaction. Remediatio...

CVE-2026-20448

The geniezone component is susceptible to a local escalation of privilege due to a missing permission check . A malicious actor who has already obtained System privilege can exploit this flaw to increase their local permissions without requiring any user interaction. Affected versions are not exp...

CVE-2026-20502

A vulnerability exists in vdec where a missing bounds check can lead to a possible out of bounds write . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. The issue is associated with Patch ID: ALPS11262030 and Issue ID:...

CVE-2026-20501

The vdec component is vulnerable to an out of bounds write caused by a heap buffer overflow . This vulnerability could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11262030 and Issue ID: M...

CVE-2026-20586

A missing bounds check in vdec leads to a possible out-of-bounds write vulnerability. This flaw could allow for remote escalation of privilege without requiring additional execution privileges, although user interaction is required for exploitation. Remediation is available via Patch ID: ALPS1138...

CVE-2026-20521

A missing bounds check in the Video HAL component can lead to a local escalation of privilege . This vulnerability allows an attacker to gain elevated privileges without requiring additional execution privileges or user interaction. The vulnerability is associated with Patch ID: ALPS11375674 and ...

CVE-2026-20522

A vulnerability exists in neuropilot caused by a missing bounds check , leading to a possible out-of-bounds write . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249050 an...

CVE-2026-20523

The neuropilot component is vulnerable to an out-of-bounds write caused by a missing bounds check . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249062 (Issue ID: MSV-917...

CVE-2026-20524

A memory corruption vulnerability exists in apu due to improper input validation. This flaw could allow an attacker to achieve local escalation of privilege without requiring additional execution privileges or user interaction. Remediation can be addressed using Patch ID: ALPS11249004 (Issue ID: ...

CVE-2026-20535

A missing permission check in aidl allows for a local escalation of privilege . A malicious actor who has already obtained System privilege can exploit this vulnerability to gain further elevated access. Exploitation does not require user interaction . Remediation is available via Patch ID: ALPS1...

CVE-2026-20536

A memory corruption vulnerability exists in aidl due to a use after free condition. This flaw could allow a malicious actor with System privileges to achieve a local escalation of privilege . Exploitation does not require user interaction. Remediation is addressed in Patch ID: ALPS11242428 (Issue...

CVE-2026-20532

A double free vulnerability exists in apu , which can lead to an application crash . This flaw allows for a local denial of service (DoS) without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249024 (Issue ID: MSV-9168). No specific ex...

CVE-2026-20531

The apu component is vulnerable to a memory corruption issue caused by a use after free condition. This vulnerability can lead to a local escalation of privilege without requiring additional execution privileges or user interaction. Remediation is available via Patch ID: ALPS11249016 (Issue ID: M...

CVE-2026-20529

A missing bounds check in the battery component can lead to an out-of-bounds write . This vulnerability allows for local escalation of privilege if a malicious actor has already obtained System privilege , and does not require user interaction. Remediation is available via Patch ID: ALPS11276677 ...