Information Disclosure in Audio HAL of MediaTek Products

CVE-2026-20513

What is CVE-2026-20513?

In certain MediaTek chipsets, a vulnerability in the Audio HAL component allows for potential information disclosure through improper input validation. This flaw may be exploited by individuals who have already gained system privileges, enabling them to access sensitive information without requiring user interaction. The issue has been documented under Patch ID: ALPS11087533, and it is crucial for users leveraging MediaTek products to review and apply the necessary patches to mitigate this risk.

References