high8.4
CVE-2026-20502
In vdec, there is a possible out of bounds write due to a missing bounds check.
Impact
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediatek | Mt2718 Firmware | All versions |
| Mediatek | Mt6580 Firmware | All versions |
| Mediatek | Mt6739 Firmware | All versions |
| Mediatek | Mt6761 Firmware | All versions |
| Mediatek | Mt6765 Firmware | All versions |
| Mediatek | Mt6768 Firmware | All versions |
| Mediatek | Mt6769 Firmware | All versions |
| Mediatek | Mt6779 Firmware | All versions |
| Mediatek | Mt6781 Firmware | All versions |
| Mediatek | Mt6785 Firmware | All versions |
| Mediatek | Mt6789 Firmware | All versions |
| Mediatek | Mt6833 Firmware | All versions |