In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11276677; Issue ID: MSV-9217.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.mediatek.com/product-security-bulletin/October-2026 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.7 · mediatekNVD modified 2026-10-09 15:02
Affected (CPE criteria) 28
cpe:2.3:o:mediatek:mt6761_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt6765_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt6768_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt6781_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt6853_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt6858_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt6881_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt6893_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt6989_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt6991_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt6993_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8171_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8186_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8188_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8189_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8196_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8766_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8768_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8775_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8781_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8788e_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8791t_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8792_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8796_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8799_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8883_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8893_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8910_firmware:-:*:*:*:*:*:*:*
References 1
- https://www.mediatek.com/product-security-bulletin/October-2026 Vendor Advisory