TI-2026-67591 CVE-2026-20586 · GHSA-32jv-4xgq-q975
Out-of-bounds write in MediaTek vdec enables privilege escalation
Priority MEDIUM 40
In vdec, there is a possible out of bounds write due to a missing bounds check.
MediaTek
Records1134All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical40CVSS 9.0–10.0
CVSS high230CVSS 7.0–8.9
Exploited now
MediaTek records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
12 records in Mt2718 Firmware · all components
TI-2026-16643 CVE-2026-20502 · GHSA-56mv-f87w-qqrr
Heap-based buffer overflow in MediaTek chipset
Priority LOW 38
In vdec, there is a possible out of bounds write due to a missing bounds check.
TI-2026-16642 CVE-2026-20501 · GHSA-fmxm-vg76-2r5p
Heap-based buffer overflow in MediaTek chipset
Priority LOW 38
In vdec, there is a possible out of bounds write due to a heap buffer overflow.
TI-2026-67566 CVE-2026-20521 · GHSA-qpf3-2wfg-8hrm
Privilege escalation in MediaTek Video HAL from missing bounds check
Priority LOW 37
In Video HAL, there is a possible escalation of privilege due to a missing bounds check.
TI-2026-16629 CVE-2026-20486 · GHSA-g7m9-j98f-r923
Improper check for unusual conditions in MediaTek chipset
Priority LOW 31
In imgsensor, there is a possible application crash due to incorrect error handling.
TI-2026-16594 CVE-2026-20451 · GHSA-gx35-9jr2-9663
Type confusion in MediaTek chipset
Priority LOW 31
In slbc, there is a possible out of bounds write due to type confusion.
TI-2026-67594 CVE-2026-20589 · GHSA-f92j-xqqj-522r
Out-of-bounds write in MediaTek venc allows local escalation
Priority LOW 30
In venc, there is a possible out of bounds write due to type confusion.
TI-2026-67593 CVE-2026-20588 · GHSA-xxc4-28wg-vmv2
Out-of-bounds write in MediaTek mtee enables privilege escalation
Priority LOW 30
In mtee, there is a possible escalation of privilege due to a missing bounds check.
TI-2026-67592 CVE-2026-20587 · GHSA-v3qv-gj82-2cx5
Type confusion in MediaTek mtee allows local privilege escalation
Priority LOW 30
In mtee, there is a possible escalation of privilege due to type confusion.
TI-2026-67590 CVE-2026-20579 · GHSA-rrxq-gh8f-hf49
Out-of-bounds write in MediaTek vdec allows privilege escalation
Priority LOW 30
In vdec, there is a possible out of bounds write due to type confusion.
TI-2026-67587 CVE-2026-20542 · GHSA-2v6f-cp2c-9f7v
Use after free in MediaTek apusys could allow local privilege escalation
Priority LOW 30
In apusys, there is a possible memory corruption due to use after free.
TI-2026-67575 CVE-2026-20530 · GHSA-7hfg-hgrm-p26m
Out-of-bounds write in MediaTek chipset display component
Priority LOW 30
In display, there is a possible out of bounds write due to a missing bounds check.