Out of Bounds Write Vulnerability in MediaTek Afe

CVE-2026-20567

What is CVE-2026-20567?

A security flaw exists in MediaTek's Afe product due to a missing bounds check, resulting in a potential out of bounds write vulnerability. Attackers with system privileges can exploit this vulnerability to escalate their privileges without requiring user interaction. The issue can affect various versions of Afe prior to patch ALPS11431394, so updating the software is crucial to maintaining system security. For more information, please refer to the security bulletin from MediaTek.

References