Privilege Escalation Vulnerability in Aidl by MediaTek

CVE-2026-20535

What is CVE-2026-20535?

A vulnerability exists in the Aidl component of MediaTek products due to a missing permission check, which may allow a malicious actor with System privileges to escalate their privileges locally. The exploitation does not require user interaction, making it a significant risk. MediaTek has released Patch ID ALPS11185216 to address this issue.

References