CVE-2026-20480: Buffer Overflow
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960023 (Note: For MT6880, MT6890, MT6980D, MT6988, MT6990) / AUTO00851189 (Note: For MT2735, MT3737); Issue ID: MSV-7586.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS10960023 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch AUTO00851189
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20480?
CVE-2026-20480 has a medium severity score of 5.5.
How do I fix CVE-2026-20480?
To fix CVE-2026-20480, apply the patch with ID ALPS10960023 provided for affected devices.
What are the potential impacts of CVE-2026-20480?
CVE-2026-20480 can lead to a local denial of service due to an out of bounds write caused by a heap buffer overflow.
What devices are affected by CVE-2026-20480?
CVE-2026-20480 affects devices using the Audio HAL, particularly those with MT6880, MT6890, MT6980D, MT6988, and MT6990 chipsets.
Is user interaction required to exploit CVE-2026-20480?
No, user interaction is not needed to exploit CVE-2026-20480.