Zurück zur CVE-Übersicht
CVE-2026-20501
HIGH(8.4)CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Risk Signal Score21/100 — NIEDRIG
- CVSS 8.4 — Hoch
Erwähnungen (letzte 60 Tage)
Artikel
EPSS-Score
0.1%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
8.4
Technische Schwere
Beschreibung
In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.
Betroffene Produkte
- cpe:2.3:o:mediatek:mt2718_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6580_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6739_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6761_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6765_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6768_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6769_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6779_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6781_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6785_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6789_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6833_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6835_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6853_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6855_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6858_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6873_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6877_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6878_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:mediatek:mt6879_firmware:-:*:*:*:*:*:*:*