Out of Bounds Write Vulnerability in MediaTek MAE

CVE-2026-20440

What is CVE-2026-20440?

The vulnerability in MediaTek's MAE arises from a missing bounds check, leading to an out of bounds write condition. This flaw could allow an attacker, who has already gained system privileges, to escalate their access without requiring user interaction. The issue is subject to exploitation if not remedied, underscoring the critical need for timely patching. For remediation, refer to Patch ID ALPS10431968 and Issue ID MSV-5824.

References