{"id":"CVE-2026-20586","revision":"470f4f2c6f1c4fdf93319579c8772ad4","records":[{"revision":"470f4f2c6f1c4fdf93319579c8772ad4","observedAt":"2026-10-30T03:48:54.855+00:00","statement":{"source":"cve-program","id":"CVE-2026-20586","aliases":[],"title":"In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS113…","description":"In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614.","state":0,"publishedAt":"2026-10-05T01:39:45.978+00:00","modifiedAt":"2026-10-30T02:45:49.514+00:00","affected":[{"ecosystem":"Vendor product","name":"MediaTek chipset","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"MediaTek, Inc.\",\n                    \"product\": \"MediaTek chipset\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"MT6768\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT6769\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT6789\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT6833\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT6855\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT6877\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8771\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8781\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8781X\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8786\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"MT8791T\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://www.mediatek.com/product-security-bulletin/October-2026"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-20586","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-20586","identifiers":["CVE-2026-20586"]},"retained":false,"historicalAffected":[]}],"coverage":[]}