cbcvebase.
CVE-2026-20438
published 2026-03-02

CVE-2026-20438: In MAE, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already…

medium6.4CVSS 3.1
AVLACHPRHUINSUCHIHAH
In MAE, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431920; Issue ID: MSV-5835.

Affected

12 ranges
VendorProductVersion rangeFixed in
googleandroid——
mediatek_incmediatek_chipset——
mediatek_incmediatek_chipset——
mediatek_incmediatek_chipset——
mediatek_incmediatek_chipset——
mediatek_incmediatek_chipset——
mediatek_incmediatek_chipset——
mediatek_incmediatek_chipset——
mediatek_incmediatek_chipset——
mediatek_incmediatek_chipset——
mediatek_incmediatek_chipset——
mediatek_incmediatek_chipset——