MediaTek Fixes 31 Security Flaws Affecting Modem, Video and AI Components
MediaTek's October bulletin patches 31 chipset flaws, including two critical modem out-of-bounds writes, with no known exploitation.
MediaTek's October 2026 Product Security Bulletin fixes 31 vulnerabilities in modem, video, AI, display, trusted execution, and system components. Critical modem flaws CVE-2026-20519 and CVE-2026-20520 are out-of-bounds writes (CWE-787) from missing bounds checks, affecting chipsets including MT6833, MT6893, MT6983, MT6991, and MT6993. High-severity issues include video decoder CVE-2026-20586, encoder CVE-2026-20589, Video HAL privilege escalation CVE-2026-20521, and NeuroPilot and APU memory bugs CVE-2026-20522, CVE-2026-20523, and CVE-2026-20524. MediaTek said manufacturers got fixes at least two months earlier and it knew of no active exploitation.
- Two critical modem out-of-bounds writes: CVE-2026-20519 and CVE-2026-20520.
- Nine high-severity bugs affect video, NeuroPilot, APU, and modem.
- Twenty medium flaws include APU use-after-free and double-free issues.
- Device makers received fixes at least two months before disclosure.
- MediaTek said it knew of no active exploitation.
- CVEs
- CVE-2026-20519CVE-2026-20520CVE-2026-20521CVE-2026-20522CVE-2026-20523CVE-2026-20524CVE-2026-20525CVE-2026-20526CVE-2026-20527CVE-2026-20531CVE-2026-20532CVE-2026-20542CVE-2026-20586CVE-2026-20589
- Vendors
- MediaTek
- Products
- NeuroPilotMediaTek modem
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-20519 | Out-of-bounds write in MediaTek modem via rogue base station | 7.5 | — | ||
CVE-2026-20520+3 related CVEs | Out-of-bounds write in MediaTek modem allows remote privilege escalation | 7.5 group max | — | ||
CVE-2026-20586+2 related CVEs | Out-of-bounds write in MediaTek video decoder (vdec) | 8.8 group max | — | ||
CVE-2026-20522+1 related CVE | Out-of-bounds write in MediaTek NeuroPilot allows local privilege escalation | 8.4 | — | ||
CVE-2026-20524+1 related CVE | Memory corruption in MediaTek APU allows local privilege escalation | 8.4 group max | — | ||
CVE-2026-20542+1 related CVE | Use-after-free in MediaTek apusys enables local privilege escalation | 6.7 | — |
From the original article
2 min read at gbhackers.com
MediaTek has released its October 2026 Product Security Bulletin, which addresses 31 vulnerabilities across modem, video, AI processing, display, trusted execution, and system components used in a wide range of its chipsets. The fixes include two critical modem out-of-bounds write vulnerabilities and nine high-severity flaws that could potentially lead to memory corruption, privilege escalation, or […]
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.