MediaTek Fixes 31 Security Flaws Affecting Modem, Video and AI Components
MediaTek's October bulletin patches 31 chipset flaws, including two critical modem out-of-bounds writes, with no known exploitation.
64
CVE-2026-20521
Local privilege escalation in MediaTek Video HAL
- CVSS 3.1
- 8.4 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
CVE-2026-20521 is a missing bounds check in MediaTek Video HAL that can result in a stack-based buffer overflow (CWE-121). A local attacker can trigger it with no extra privileges and no user interaction, escalating privileges on the device. It affects products whose firmware includes the vulnerable Video HAL; the advisory does not name chipsets or version ranges. No public proof-of-concept is known, it is not in CISA KEV, and CVSS is not yet scored. MediaTek tracks the fix as patch ALPS11375674 (issue MSV-9571), issued with a broader set of modem, video, and AI component fixes.
What to do: Install the OEM or Android security update that includes MediaTek patch ALPS11375674 (issue MSV-9571). Confirm the vendor bulletin names this patch before treating a device as fixed; the advisory describes no configuration workaround.
| Product | Affected |
|---|---|
| MediaTek Video HAL | — |
Estimated exposure
massPotentially tens of millions of MediaTek Android devices; exact affected subset unknown — MediaTek SoCs ship in a large share of Android phones and tablets, and Video HAL is a standard on-device component, but this advisory names no chipsets or versions, so the figure is an order-of-magnitude estimate of that footprint rather…
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.
- Vendors
- mediatek
- Products
- mt8910 firmware, mt2718 firmware, mt6768 firmware, mt6769 firmware, mt6781 firmware, mt6789 firmware, mt6833 firmware, mt6835 firmware, mt6853 firmware, mt6855 firmware, mt6858 firmware, mt6877 firmware
- Weakness
- CWE-121
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H