Out of Bounds Write Vulnerability in MediaTek Vdec Software

CVE-2026-20502

What is CVE-2026-20502?

A vulnerability exists in MediaTek's vdec software that allows for an out of bounds write due to a lack of proper bounds checking. This weakness may enable local users to escalate their privileges without requiring additional execution rights. Notably, the vulnerability can be exploited without any user interaction, raising significant security concerns for affected systems. For mitigation, users should apply patch ALPS11262030 as recommended by MediaTek.

References