Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.4
CVE-2026-20521: MediaTek chipset video component may allow privilege escalation
CVE-2026-20521 · published 4 days ago
Summary
The video handling part of MediaTek chipsets can be tricked into giving a program higher system rights than it should have. This can happen without any user interaction or extra code. Install the MediaTek patch ALPS11375674 as soon as possible to fix the issue.
What to do
- Update google :unknown: to version SoCVersion:2026-11-05.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | mediatek, inc. | mediatek chipset | MT2718 |
| Android | :unknown: |
>= SoCVersion:0, < SoCVersion:2026-11-05 Fix: upgrade to SoCVersion:2026-11-05
|
Original advisory text
ASB-A-541960865
In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
8.4
High
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published1 Nov 2026
Updated2 Nov 2026
First seen5 Oct 2026
Track software like this
Free during beta