MediaTek vdec Heap Buffer Overflow Enables Local Priv Escalation
CVE-2026-20501 Published on September 7, 2026
In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.
Vulnerability Analysis
CVE-2026-20501 can be exploited with local system access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
Products Associated with CVE-2026-20501
Want to know whenever a new CVE is published for Google Android? stack.watch will email you.
Affected Versions
MediaTek, Inc. MediaTek chipset:- Version MT2718 is affected.
- Version MT6580 is affected.
- Version MT6739 is affected.
- Version MT6761 is affected.
- Version MT6765 is affected.
- Version MT6768 is affected.
- Version MT6769 is affected.
- Version MT6779 is affected.
- Version MT6781 is affected.
- Version MT6785 is affected.
- Version MT6789 is affected.
- Version MT6833 is affected.
- Version MT6835 is affected.
- Version MT6853 is affected.
- Version MT6855 is affected.
- Version MT6858 is affected.
- Version MT6873 is affected.
- Version MT6877 is affected.
- Version MT6878 is affected.
- Version MT6879 is affected.
- Version MT6881 is affected.
- Version MT6883 is affected.
- Version MT6885 is affected.
- Version MT6886 is affected.
- Version MT6889 is affected.
- Version MT6893 is affected.
- Version MT6895 is affected.
- Version MT6897 is affected.
- Version MT6899 is affected.
- Version MT6983 is affected.
- Version MT6985 is affected.
- Version MT6989 is affected.
- Version MT6991 is affected.
- Version MT6993 is affected.
- Version MT8126 is affected.
- Version MT8171 is affected.
- Version MT8186 is affected.
- Version MT8188 is affected.
- Version MT8189 is affected.
- Version MT8195 is affected.
- Version MT8196 is affected.
- Version MT8367 is affected.
- Version MT8391 is affected.
- Version MT8395 is affected.
- Version MT8668 is affected.
- Version MT8676 is affected.
- Version MT8678 is affected.
- Version MT8696 is affected.
- Version MT8781 is affected.
- Version MT8788E is affected.
- Version MT8792 is affected.
- Version MT8799 is affected.
- Version MT8910 is affected.