Search vulnerabilities

Results 32

Export CSV
CVE-2026-20521

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Products
CVE-2026-20522

In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249050; Issue ID: MSV-9172.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Products
CVE-2026-20586

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Products
CVE-2026-20502

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9196.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Products
CVE-2026-20501

In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Products
CVE-2026-20474

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20475

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20477

Out‑of‑Bounds Write in MediaTek Display Code Allows Local Privilege Escalation

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20484

In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20488

In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20489

Integer Overflow in Mediatek Display Engine Enables Local Information Disclosure

In display, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Products
CVE-2026-20473

Display Memory Corruption in MediaTek Chipsets Leading to Local Privilege Escalation

In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Products