cbcvebase.
CVE-2026-20424
published 2026-03-02

CVE-2026-20424: In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has…

medium4.4CVSS 3.1
AVLACLPRHUINSUCHINAN
In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5540.

Affected

7 ranges
VendorProductVersion rangeFixed in
googleandroid
googleandroid
mediatek_incmediatek_chipset
mediatek_incmediatek_chipset
mediatek_incmediatek_chipset
mediatek_incmediatek_chipset
mediatek_incmediatek_chipset