Out of Bounds Write Vulnerability in MediaTek's SLBC Component
CVE-2026-20451

6.7MEDIUM

Key Information:

Vendor

MediaTek
Status
Mediatek Chipset
Vendor
CVE Published:
4 May 2026

What is CVE-2026-20451?

The vulnerability in MediaTek's SLBC component stems from a potential out of bounds write caused by type confusion. This issue allows an attacker with system privileges to exploit the vulnerability for local escalation of privilege without requiring user interaction. Affected users should promptly apply the patch ALPS10828685 to mitigate risks associated with this vulnerability.

Affected Version(s)

MediaTek chipset MT2718

MediaTek chipset MT6899

MediaTek chipset MT6985

References

https://corp.mediatek.com/product-security-bulletin/May-2026

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.