cbcvebase.
CVE-2026-20478
published 2026-08-03

CVE-2026-20478: In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges…

PriorityP425medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.14%
3.5th percentile
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981454 (Note: For MT6880, MT6890, MT6988, MT6990) / AUTO00851293 (Note: For MT2735, MT2737); Issue ID: MSV-7638.

Affected

6 ranges
VendorProductVersion rangeFixed in
mediatek_incmediatek_chipset——
mediatek_incmediatek_chipset——
mediatek_incmediatek_chipset——
mediatek_incmediatek_chipset——
mediatek_incmediatek_chipset——
mediatek_incmediatek_chipset——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.