CVE-2026-20521: High severity MediaTek Video HAL vulnerability

Published Oct 5, 2026

Updated

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.

Affected Software

1 affected component

MediaTek Video HAL

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Video HAL to a version that resolves this vulnerability.
Patch ALPS11375674

Event History

Oct 5, 2026

CVE Published

via MITRE·01:39 AM

Data Sourced

via MITRE·01:39 AM

DescriptionWeakness

Data Sourced

via NVD·02:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue requires local access. No additional execution privileges and no user interaction are needed for exploitation.

What remediation identifier should teams use when tracking a fix?

The listed patch ID is ALPS11375674. The associated issue ID is MSV-9571.