CVE-2026-20478

Name of the Vulnerable Software and Affected Versions MediaTek Audio HAL (affected versions not specified)

Description An out of bounds write exists in the Audio HAL due to a heap buffer overflow. A heap buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold. This issue can lead to a local denial of service and requires user execution privileges, although no user interaction is necessary for exploitation.

Recommendations Apply patch ALPS10981454 for MT6880, MT6890, MT6988, and MT6990. Apply patch AUTO00851293 for MT2735 and MT2737.