Video HAL Vulnerability in MediaTek Products Leading to Privilege Escalation

CVE-2026-20521

What is CVE-2026-20521?

A vulnerability exists in MediaTek's Video HAL that may allow a local user to escalate their privileges due to a missing bounds check. This flaw can be exploited without requiring additional execution privileges or user interaction, making it a significant security risk. Affected users should apply the patch indicated by Patch ID ALPS11375674 to mitigate this vulnerability.

References