MediaTek Fixes 31 Security Flaws Affecting Modem, Video and AI Components
MediaTek's October bulletin patches 31 chipset flaws, including two critical modem out-of-bounds writes, with no known exploitation.
64
Vulnerability5 · 3 reads
CVE-2026-20589
Out-of-bounds write in MediaTek venc video encoder
- CVSS 3.1
- 6.7 medium
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
CVE-2026-20589 is an out-of-bounds write (CWE-787) in MediaTek’s venc video-encoder component, caused by a type confusion. A local attacker who already has System privilege can trigger the flaw without user interaction and escalate privileges further. It affects devices that include the vulnerable MediaTek venc implementation; the CVE record does not name chipsets or version ranges and identifies patch ALPS11383899 (issue MSV-9606). MediaTek assigned the CVE; it is not scored in the supplied data, is not on the CISA KEV list, and no public proof-of-concept is known. Exploitation in the wild has not been reported.
What to do: Install the OEM or device firmware update that includes MediaTek patch ALPS11383899 (issue MSV-9606) as soon as the vendor ships it. Until then, limit what can run with System privileges on devices that use MediaTek venc, because exploitation requires that access and needs no user interaction. No public exploit is known, but the issue is still worth patching promptly.
| Product | Affected |
|---|---|
| MediaTek venc (video encoder) | — |
Estimated exposure
massmillions to hundreds of millions of MediaTek devices (exact chipset scope unpublished) — MediaTek SoCs that include a video encoder are widely used in Android phones and other devices, so a venc flaw plausibly affects well over a million units, but this CVE entry does not list chipsets or versions, so the figure is an…
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9606.
- Vendors
- mediatek
- Products
- mt2718 firmware, mt6768 firmware, mt6769 firmware, mt6789 firmware, mt6833 firmware, mt6855 firmware, mt6877 firmware, mt8186 firmware, mt8188 firmware, mt8189 firmware, mt8195 firmware, mt8196 firmware
- Weakness
- CWE-787
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H