Privilege Escalation Vulnerability in Power HAL by MediaTek

CVE-2026-20508

What is CVE-2026-20508?

In Power HAL, a vulnerability exists that allows for potential local escalation of privilege due to type confusion. This issue can be exploited without user interaction, provided that a malicious actor has already gained System privileges. Addressing this vulnerability promptly is crucial to safeguarding system integrity and preventing unauthorized access. The issue has been cataloged under Patch ID: ALPS11165543 and Issue ID: MSV-9012.

References