Privilege Escalation Vulnerability in MediaTek Camera Middleware

CVE-2026-20510

What is CVE-2026-20510?

A vulnerability exists in MediaTek's camera middleware that allows a malicious actor to exploit a double free condition, potentially leading to local privilege escalation. This issue can be exploited without requiring user interaction, posing a risk to systems where the attacker has already gained system-level permissions. Mitigation measures include applying the provided patch (ALPS11134622) to safeguard affected products.

References