Local Priv Escalation via OOB Write in MediaTek AFE
CVE-2026-20576 Published on November 2, 2026
In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431385; Issue ID: MSV-9920.
Weakness Type
What is an Integer underflow Vulnerability?
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result. This can happen in signed and unsigned cases.
CVE-2026-20576 has been classified to as an Integer underflow vulnerability or weakness.
Affected Versions
MediaTek, Inc. MediaTek chipset:- Version MT6789 is affected.
- Version MT6835 is affected.
- Version MT6855 is affected.
- Version MT6858 is affected.
- Version MT6877 is affected.
- Version MT6885 is affected.
- Version MT6886 is affected.
- Version MT6895 is affected.
- Version MT6897 is affected.
- Version MT6985 is affected.
- Version MT6988 is affected.
- Version MT6989 is affected.
- Version MT6991 is affected.
- Version MT6993 is affected.