{"id":"CVE-2026-20579","revision":"43e0346c2fae447bade1e8f6908d1ee3","records":[{"revision":"43e0346c2fae447bade1e8f6908d1ee3","observedAt":"2026-10-30T03:48:54.855+00:00","statement":{"source":"cve-program","id":"CVE-2026-20579","aliases":[],"title":"In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch …","description":"In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9800.","state":0,"publishedAt":"2026-10-05T01:39:58.494+00:00","modifiedAt":"2026-10-30T02:46:18.243+00:00","affected":[{"ecosystem":"Vendor product","name":"MediaTek chipset","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"MediaTek, Inc.\",\n                    \"product\": \"MediaTek chipset\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"MT6768\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT6769\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT6789\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT6833\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT6855\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT6877\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8771\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8781\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8781X\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8786\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8791T\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://www.mediatek.com/product-security-bulletin/October-2026"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-20579","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-20579","identifiers":["CVE-2026-20579"]},"retained":false,"historicalAffected":[]}],"coverage":[]}