Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-20521

Mediatek mt8910 Firmware: stack buffer overflow

Risk score
51/100
CVSS
8.4 v3.1
Exploit chance (30 days)
0.1%
Published
5 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.
Affected
Mediatek mt8910 Firmware
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Why it is Yellow

  • CVSS 8.4 high

References

Original description

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571.

Last activity 5 Oct 2026. Patch Forecast updates every hour.