Out of Bounds Write Vulnerability in MediaTek Devices

CVE-2026-20553

What is CVE-2026-20553?

A vulnerability in MediaTek devices allows for an out of bounds write due to insufficient bounds checking. This issue can be exploited by an attacker with physical access to the device for local privilege escalation. Notably, the exploit doesn't require any additional execution privileges, and user interaction is unnecessary. Affected users are urged to apply available patches to mitigate this security risk. For further details, refer to the patch ID ALPS11468968 and issue ID MSV-10166.

References