Privilege Escalation Vulnerability in ImgSys Affected by MediaTek
CVE-2026-20414

6.7MEDIUM

Key Information:

Vendor

MediaTek
Status
Mt6897, Mt6989, Mt8196, Mt8678, Mt8766, Mt8768, Mt8786, Mt8796
Vendor
CVE Published:
2 February 2026

What is CVE-2026-20414?

An escalation of privilege vulnerability exists within ImgSys, allowing a malicious actor to exploit a use-after-free condition. This vulnerability can enable local privilege escalation if the attacker has already gained System privileges, making it a critical concern for system integrity. The exploitation does not require user interaction, escalating risks for affected users. A patch has been made available to mitigate this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

MT6897, MT6989, MT8196, MT8678, MT8766, MT8768, MT8786, MT8796 Android 15.0

References

https://corp.mediatek.com/product-security-bulletin/Febru...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.