Description
In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249004; Issue ID: MSV-9170.
Affected products
mediatek: mt6899 firmware; mediatek: mt6899; mediatek: mt6993 firmware; mediatek: mt6993; mediatek: mt8668 firmware; mediatek: mt8668; mediatek: mt8781 firmware; mediatek: mt8781; mediatek: mt8793 firmware; mediatek: mt8793; mediatek: mt8910 firmware; mediatek: mt8910
References1
- www.mediatek.com/product-security-bulletin/October-2026 Vendor Advisory
Metrics
- CVSS 3.1
-
8.4
HIGH
Score source: CNA
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 0% percentile: 3 · as of 10 November 2026
- CWE
- CWE-1285
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.