Out of Bounds Write Vulnerability in AFE Product by MediaTek

CVE-2026-20576

What is CVE-2026-20576?

A vulnerability exists in the AFE product by MediaTek that allows for an out of bounds write due to a missing bounds check. This security flaw enables attackers to escalate privileges locally, but requires that the malicious actor has already gained system-level access. Exploitation does not necessitate user interaction, making it a potential threat to system integrity. A patch has been released under ID ALPS11431385 to address this issue.

References