Skip to content
8.8 High

CVE-2026-20586 In vdec, there is a possible out of bounds write due to a missing bounds check

Description

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614.

Affected products and versions

Product Affected versions Fixed in
MediaTek chipset Versions not published

References

Timeline

  1. Published
  2. Last modified
The 230 CVEs of MediaTek chipset →
Track this CVE