CVE-2026-20529

Analyzed Analyzed - Analysis Complete

Out-of-Bounds Write in MediaTek Battery Driver

Publication date: 2026-10-05

Last updated on: 2026-10-09

Assigner: MediaTek, Inc.

Description

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11276677; Issue ID: MSV-9217.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-05

Last Modified

2026-10-09

Generated

2026-10-19

AI Q&A

2026-10-05

EPSS Evaluated

2026-10-18

NVD

CVE-2026-20529

EUVD

EUVD-2026-92194

Affected Vendors & Products

Vendor	Product	Version / Range
mediatek	mt6761_firmware	*
mediatek	mt6765_firmware	*
mediatek	mt6768_firmware	*
mediatek	mt6781_firmware	*
mediatek	mt6853_firmware	*
mediatek	mt6858_firmware	*
mediatek	mt6881_firmware	*
mediatek	mt6893_firmware	*
mediatek	mt6989_firmware	*
mediatek	mt6991_firmware	*
mediatek	mt6993_firmware	*
mediatek	mt8171_firmware	*
mediatek	mt8186_firmware	*
mediatek	mt8188_firmware	*
mediatek	mt8189_firmware	*
mediatek	mt8196_firmware	*
mediatek	mt8766_firmware	*
mediatek	mt8768_firmware	*
mediatek	mt8775_firmware	*
mediatek	mt8781_firmware	*
mediatek	mt8788e_firmware	*
mediatek	mt8791t_firmware	*
mediatek	mt8792_firmware	*
mediatek	mt8796_firmware	*
mediatek	mt8799_firmware	*
mediatek	mt8883_firmware	*
mediatek	mt8893_firmware	*
mediatek	mt8910_firmware	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is in the battery component of a system. It involves a missing bounds check that could allow an out of bounds write operation. This flaw could be exploited to escalate local privileges if an attacker already has System privilege access. No user interaction is required for exploitation.

Detection Guidance

Detection requires checking if your device uses a MediaTek chipset with an unpatched battery component. Verify if your device has received the ALPS11276677 patch from the OEM. Check system logs for out-of-bounds write attempts in battery-related processes.

Impact Analysis

If exploited, this vulnerability could allow an attacker with System privilege to gain further elevated access, potentially compromising the entire system. This could lead to unauthorized data access, system manipulation, or other malicious activities depending on the attacker's goals.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it involves a local privilege escalation in a specific hardware component (battery) with System privilege already obtained. No data exposure or privacy violation is indicated.

Mitigation Strategies

Apply the patch identified as ALPS11276677 to address the missing bounds check in the battery component. Ensure the System privilege is properly restricted to prevent local escalation of privilege.

Hi! I’m here to help you understand CVE-2026-20529. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70