Analysis and contextual insights are available on OpenCVE Cloud.
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Mon, 02 Nov 2026 12:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Mediatek
Mediatek mediatek Chipset Mediatek, Inc. Mediatek, Inc. mediatek Chipset |
|
| Vendors & Products |
Mediatek
Mediatek mediatek Chipset Mediatek, Inc. Mediatek, Inc. mediatek Chipset |
Mon, 02 Nov 2026 05:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Out-of-bounds write in MediaTek Neuropilot enabling local privilege escalation |
Mon, 02 Nov 2026 02:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11263078; Issue ID: MSV-9001. | |
| Weaknesses | CWE-1286 | |
| References |
|
Status: PUBLISHED
Assigner: MediaTek
Published:
Updated: 2026-11-02T02:34:12.308Z
Reserved: 2025-11-03T01:30:59.050Z
Link: CVE-2026-20595
No data.
Status : Received
Published: 2026-11-02T03:17:37.053
Modified: 2026-11-02T03:17:37.053
Link: CVE-2026-20595
No data.
OpenCVE Enrichment
Updated: 2026-11-02T12:15:06Z
-
CWE-1286
Improper Validation of Syntactic Correctness of Input