medium6.7
CVE-2026-20535
In aidl, there is a possible escalation of privilege due to a missing permission check.
Impact
In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185216; Issue ID: MSV-9039.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediatek | Mt8910 Firmware | All versions |
| Mediatek | Mt6878 Firmware | All versions |
| Mediatek | Mt6881 Firmware | All versions |
| Mediatek | Mt6899 Firmware | All versions |
| Mediatek | Mt6989 Firmware | All versions |
| Mediatek | Mt6991 Firmware | All versions |
| Mediatek | Mt6993 Firmware | All versions |
| Mediatek | Mt8188 Firmware | All versions |
| Mediatek | Mt8189 Firmware | All versions |
| Mediatek | Mt8668 Firmware | All versions |
| Mediatek | Mt8781 Firmware | All versions |
| Mediatek | Mt8793 Firmware | All versions |