CVE-2026-20523
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
52/100
Published: 2026-10-05
Modified: 2026-11-04
First seen: 2026-11-03
Status: active
Attack Surface
Low Complexity
No Auth
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249062; Issue ID: MSV-9171.
Weakness Classification (1)
Affected Software (27)
| Vendor | Product | Version |
|---|---|---|
| MediaTek, Inc. | MediaTek chipset | MT6881 |
| MediaTek, Inc. | MediaTek chipset | MT6993 |
| MediaTek, Inc. | MediaTek chipset | MT8188 |
| MediaTek, Inc. | MediaTek chipset | MT8189 |
| MediaTek, Inc. | MediaTek chipset | MT8668 |
| MediaTek, Inc. | MediaTek chipset | MT8781 |
| MediaTek, Inc. | MediaTek chipset | MT8793 |
| MediaTek, Inc. | MediaTek chipset | MT8875 |
| MediaTek, Inc. | MediaTek chipset | MT8910 |
| MediaTek, Inc. | MediaTek chipset | MT6881 |
| MediaTek, Inc. | MediaTek chipset | MT6993 |
| MediaTek, Inc. | MediaTek chipset | MT8188 |
| MediaTek, Inc. | MediaTek chipset | MT8189 |
| MediaTek, Inc. | MediaTek chipset | MT8668 |
| MediaTek, Inc. | MediaTek chipset | MT8781 |
| MediaTek, Inc. | MediaTek chipset | MT8793 |
| MediaTek, Inc. | MediaTek chipset | MT8875 |
| MediaTek, Inc. | MediaTek chipset | MT8910 |
| mediatek | mt6881_firmware | - |
| mediatek | mt6993_firmware | - |
| mediatek | mt8188_firmware | - |
| mediatek | mt8189_firmware | - |
| mediatek | mt8668_firmware | - |
| mediatek | mt8781_firmware | - |
| mediatek | mt8793_firmware | - |
| mediatek | mt8875_firmware | - |
| mediatek | mt8910_firmware | - |