What’s Vulnerable › Vulnerabilities

CVE-2026-20524

• Severity: high (CVSS 8.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-05 · updated 2026-10-08
• Weakness: CWE-1285

Description

In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170.

Affected products

• Mediatek Mt6899 Firmware: all versions
• Mediatek Mt6993 Firmware: all versions
• Mediatek Mt8668 Firmware: all versions
• Mediatek Mt8781 Firmware: all versions
• Mediatek Mt8793 Firmware: all versions
• Mediatek Mt8910 Firmware: all versions

References

• https://www.mediatek.com/product-security-bulletin/October-2026

Get alerted when CVE-2026-20524 or the next vulnerability affects your stack