CVE-2026-20501

EUVD-2026-72194
In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.4 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 2.37%
Affected Products (NVD)
VendorProductVersion
mediatekmt2718_firmware
-
mediatekmt6580_firmware
-
mediatekmt6739_firmware
-
mediatekmt6761_firmware
-
mediatekmt6765_firmware
-
mediatekmt6768_firmware
-
mediatekmt6769_firmware
-
mediatekmt6779_firmware
-
mediatekmt6781_firmware
-
mediatekmt6785_firmware
-
mediatekmt6789_firmware
-
mediatekmt6833_firmware
-
mediatekmt6835_firmware
-
mediatekmt6853_firmware
-
mediatekmt6855_firmware
-
mediatekmt6858_firmware
-
mediatekmt6873_firmware
-
mediatekmt6877_firmware
-
mediatekmt6878_firmware
-
mediatekmt6879_firmware
-
mediatekmt6881_firmware
-
mediatekmt6883_firmware
-
mediatekmt6885_firmware
-
mediatekmt6886_firmware
-
mediatekmt6889_firmware
-
mediatekmt6893_firmware
-
mediatekmt6895_firmware
-
mediatekmt6897_firmware
-
mediatekmt6899_firmware
-
mediatekmt6983_firmware
-
mediatekmt6985_firmware
-
mediatekmt6989_firmware
-
mediatekmt6991_firmware
-
mediatekmt6993_firmware
-
mediatekmt8126_firmware
-
mediatekmt8171_firmware
-
mediatekmt8186_firmware
-
mediatekmt8188_firmware
-
mediatekmt8189_firmware
-
mediatekmt8195_firmware
-
mediatekmt8196_firmware
-
mediatekmt8367_firmware
-
mediatekmt8391_firmware
-
mediatekmt8395_firmware
-
mediatekmt8668_firmware
-
mediatekmt8676_firmware
-
mediatekmt8678_firmware
-
mediatekmt8696_firmware
-
mediatekmt8781_firmware
-
mediatekmt8788e_firmware
-
mediatekmt8792_firmware
-
mediatekmt8799_firmware
-
mediatekmt8910_firmware
-
𝑥
= Vulnerable software versions