In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11242428; Issue ID: MSV-9038.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.mediatek.com/product-security-bulletin/October-2026 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.7 · mediatekNVD modified 2026-10-09 14:27
Affected (CPE criteria) 13
cpe:2.3:o:mediatek:mt6878_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt6881_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt6899_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt6989_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt6991_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt6993_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8188_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8189_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8668_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8695_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8696_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8781_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:mediatek:mt8910_firmware:-:*:*:*:*:*:*:*
References 1
- https://www.mediatek.com/product-security-bulletin/October-2026 Vendor Advisory