CVE-2026-20530: Medium severity MediaTek Display vulnerability
Published Oct 5, 2026
·Updated
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11292777; Issue ID: MSV-9195.
Affected Software
23 affected components
MediaTek Display
All of the following
MediaTek Mt2718 Firmware
MediaTek Mt2718
All of the following
MediaTek Mt6991 Firmware
MediaTek Mt6991
All of the following
MediaTek Mt6993 Firmware
MediaTek Mt6993
All of the following
MediaTek Mt8126 Firmware
MediaTek Mt8126
All of the following
MediaTek Mt8171 Firmware
MediaTek Mt8171
All of the following
MediaTek Mt8188 Firmware
MediaTek Mt8188
All of the following
MediaTek Mt8189 Firmware
MediaTek Mt8189
All of the following
MediaTek Mt8196 Firmware
MediaTek Mt8196
All of the following
MediaTek Mt8668 Firmware
MediaTek Mt8668
All of the following
MediaTek Mt8678 Firmware
MediaTek Mt8678
All of the following
MediaTek Mt8793 Firmware
MediaTek Mt8793
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS11292777
Event History
Oct 5, 2026
CVE Published
via MITRE·01:40 AM
Data Sourced
via MITRE·01:40 AM
DescriptionWeakness
Data Sourced
via NVD·02:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What level of access does an attacker need before exploiting this issue?
The attacker must already have System privilege. Exploitation does not require user interaction.
2
What is the potential impact after exploitation?
The issue can cause an out-of-bounds write in the display component and could lead to local escalation of privilege.
3
Which identifiers can be used to track the vendor fix?
The vendor identifies the fix as Patch ID ALPS11292777 and Issue ID MSV-9195.