CVE-2026-20521: High severity MediaTek Video HAL vulnerability
Published Oct 5, 2026
·Updated
In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.
Affected Software
99 affected componentsFixes available
MediaTek Video HAL
All of the following
MediaTek Mt8910 Firmware
MediaTek Mt8910
All of the following
MediaTek Mt2718 Firmware
MediaTek Mt2718
All of the following
MediaTek Mt6768 Firmware
MediaTek Mt6768
All of the following
MediaTek Mt6769 Firmware
MediaTek Mt6769
All of the following
MediaTek Mt6781 Firmware
MediaTek Mt6781
All of the following
MediaTek Mt6789 Firmware
MediaTek Mt6789
All of the following
MediaTek Mt6833 Firmware
MediaTek Mt6833
All of the following
MediaTek Mt6835 Firmware
MediaTek Mt6835
All of the following
MediaTek Mt6853 Firmware
MediaTek Mt6853
All of the following
MediaTek Mt6855 Firmware
MediaTek Mt6855
All of the following
MediaTek Mt6858 Firmware
MediaTek Mt6858
All of the following
MediaTek Mt6877 Firmware
MediaTek Mt6877
All of the following
MediaTek Mt6878 Firmware
MediaTek Mt6878
All of the following
MediaTek Mt6879 Firmware
MediaTek Mt6879
All of the following
MediaTek Mt6881 Firmware
MediaTek Mt6881
All of the following
MediaTek Mt6883 Firmware
MediaTek Mt6883
All of the following
MediaTek Mt6885 Firmware
MediaTek Mt6885
All of the following
MediaTek Mt6886 Firmware
MediaTek Mt6886
All of the following
MediaTek Mt6889 Firmware
MediaTek Mt6889
All of the following
MediaTek Mt6893 Firmware
MediaTek Mt6893
All of the following
MediaTek Mt6895 Firmware
MediaTek Mt6895
All of the following
MediaTek Mt6897 Firmware
MediaTek Mt6897
All of the following
MediaTek Mt6899 Firmware
MediaTek Mt6899
All of the following
MediaTek Mt6983 Firmware
MediaTek Mt6983
All of the following
MediaTek Mt6985 Firmware
MediaTek Mt6985
All of the following
MediaTek Mt6989 Firmware
MediaTek Mt6989
All of the following
MediaTek Mt6991 Firmware
MediaTek Mt6991
All of the following
MediaTek Mt6993 Firmware
MediaTek Mt6993
All of the following
MediaTek Mt8126 Firmware
MediaTek Mt8126
All of the following
MediaTek Mt8171 Firmware
MediaTek Mt8171
All of the following
MediaTek Mt8186 Firmware
MediaTek Mt8186
All of the following
MediaTek Mt8188 Firmware
MediaTek Mt8188
All of the following
MediaTek Mt8189 Firmware
MediaTek Mt8189
All of the following
MediaTek Mt8195 Firmware
MediaTek Mt8195
All of the following
MediaTek Mt8196 Firmware
MediaTek Mt8196
All of the following
MediaTek Mt8367 Firmware
MediaTek Mt8367
All of the following
MediaTek Mt8391 Firmware
MediaTek Mt8391
All of the following
MediaTek Mt8395 Firmware
MediaTek Mt8395
All of the following
MediaTek Mt8668 Firmware
MediaTek Mt8668
All of the following
MediaTek Mt8676 Firmware
MediaTek Mt8676
All of the following
MediaTek Mt8678 Firmware
MediaTek Mt8678
All of the following
MediaTek Mt8695 Firmware
MediaTek Mt8695
All of the following
MediaTek Mt8696 Firmware
MediaTek Mt8696
All of the following
MediaTek Mt8781 Firmware
MediaTek Mt8781
All of the following
MediaTek Mt8788e Firmware
MediaTek Mt8788e
All of the following
MediaTek Mt8792 Firmware
MediaTek Mt8792
All of the following
MediaTek Mt8793 Firmware
MediaTek Mt8793
All of the following
MediaTek Mt8799 Firmware
MediaTek Mt8799
android/:unknown:>=SoCVersion:0<SoCVersion:2026-11-05
SoCVersion:2026-11-05
Google Android
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in SoCVersion:2026-11-05 - Upgrade
Upgrade
Video HALto a version that resolves this vulnerability.Patch ALPS11375674
Event History
Oct 5, 2026
CVE Published
via MITRE·01:39 AM
Data Sourced
via MITRE·01:39 AM
DescriptionWeakness
Data Sourced
via NVD·02:16 AM
DescriptionSeverityWeaknessAffected Software
Nov 1, 2026
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software
Nov 2, 2026
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The issue requires local access. No additional execution privileges and no user interaction are needed for exploitation.
2
What remediation identifier should teams use when tracking a fix?
The listed patch ID is ALPS11375674. The associated issue ID is MSV-9571.