Out of Bounds Write Vulnerability in MediaTek's SLBC Component
CVE-2026-20451

Currently unrated

Key Information:

Vendor

MediaTek
Status
Mediatek Chipset
Vendor
CVE Published:
4 May 2026

What is CVE-2026-20451?

The vulnerability in MediaTek's SLBC component stems from a potential out of bounds write caused by type confusion. This issue allows an attacker with system privileges to exploit the vulnerability for local escalation of privilege without requiring user interaction. Affected users should promptly apply the patch ALPS10828685 to mitigate risks associated with this vulnerability.

Affected Version(s)

MediaTek chipset MT2718

MediaTek chipset MT6899

MediaTek chipset MT6985

References

https://corp.mediatek.com/product-security-bulletin/May-2026

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.