CVE-2026-20544: MediaTek meta vulnerability
In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS11049530 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch ALPS11480843
Event History
Frequently Asked Questions
Who is realistically exposed to exploitation?
Exploitation requires physical access to the device. A remote-only attacker is not described as able to exploit this issue.
Does an attacker need existing code-execution privileges or user interaction?
No additional execution privileges and no user interaction are needed. The issue could allow local escalation of privilege once an attacker has physical access.
What patch identifiers should be tracked for remediation?
The listed patch IDs are ALPS11049530 and ALPS11480843. The associated issue ID is MSV-7935.