CVE-2026-20416
Out-of-Bounds Write in PCIe Causes Local Privilege Escalation
Publication date: 2026-03-02
Last updated on: 2026-03-03
Assigner: MediaTek, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| android | 15.0 | |
| android | 16.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the pcie component where a missing bounds check can cause an out of bounds write. This means that the software does not properly verify the limits of memory access, potentially allowing data to be written outside the intended memory area.
Exploitation of this vulnerability could lead to a local escalation of privilege, but only if the attacker already has System privilege on the device. No user interaction is required to exploit this issue.
How can this vulnerability impact me? :
If exploited, this vulnerability could allow an attacker with existing System privileges to escalate their privileges further locally on the affected system.
Since user interaction is not needed, an attacker who has already gained high-level access could leverage this flaw to potentially gain even greater control or cause unintended behavior in the system.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, apply the patches identified as ALPS10315038 or ALPS10340155 as soon as possible.
Since the vulnerability requires local privilege and affects the Mediatek PCIe component, ensure that only trusted users have system privileges to reduce risk.