Out of Bounds Write Vulnerability in MediaTek Products

CVE-2026-20477

What is CVE-2026-20477?

A vulnerability exists in MediaTek systems where a missing bounds check can lead to an out of bounds write. This flaw allows local privilege escalation if an attacker has already gained System privilege. No user interaction is necessary for exploitation, increasing the risk to affected systems. MediaTek has issued a patch (Patch ID: ALPS11009963) to address this issue, and users are advised to apply the updates promptly to mitigate potential threats.

References