{"id":"CVE-2026-20512","title":"In Audio HAL, there is a possible escalation of privilege due to improper input validation","summary":"In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed f…","severity":"medium","cvss":6.7,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-307"],"vendor":"MediaTek, Inc.","product":"MediaTek chipset","affected":["mediatek_chipset MT2718","mediatek_chipset MT6769","mediatek_chipset MT6781","mediatek_chipset MT6789","mediatek_chipset MT6833","mediatek_chipset MT6835","mediatek_chipset MT6853","mediatek_chipset MT6855","mediatek_chipset MT6858","mediatek_chipset MT6877","mediatek_chipset MT6878","mediatek_chipset MT6881","mediatek_chipset MT6886","mediatek_chipset MT6893","mediatek_chipset MT6895","mediatek_chipset MT6897","mediatek_chipset MT6899","mediatek_chipset MT6989","mediatek_chipset MT6991","mediatek_chipset MT6993","mediatek_chipset MT8126","mediatek_chipset MT8168","mediatek_chipset MT8171","mediatek_chipset MT8186","mediatek_chipset MT8188","mediatek_chipset MT8189","mediatek_chipset MT8195","mediatek_chipset MT8196","mediatek_chipset MT8321","mediatek_chipset MT8365","mediatek_chipset MT8367","mediatek_chipset MT8385","mediatek_chipset MT8390","mediatek_chipset MT8391","mediatek_chipset MT8668","mediatek_chipset MT8676","mediatek_chipset MT8678","mediatek_chipset MT8696","mediatek_chipset MT8755","mediatek_chipset MT8766","mediatek_chipset MT8768","mediatek_chipset MT8771","mediatek_chipset MT8775","mediatek_chipset MT8781","mediatek_chipset MT8786","mediatek_chipset MT8788E","mediatek_chipset MT8791T","mediatek_chipset MT8792","mediatek_chipset MT8793","mediatek_chipset MT8796"],"published":"2026-09-07","updated":"2026-09-08","sourceUpdated":"2026-09-08T18:37:41.047","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-20512","references":[{"url":"https://www.mediatek.com/product-security-bulletin/September-2026","label":"security@mediatek.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-08T03:55:20.668805Z"},"epss":0.00108,"epssPercentile":0.01088,"ingestedAt":"2026-09-07T12:10:16.202Z","slug":"CVE-2026-20512","body":"## Overview\n\nIn Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":37,"depthScoreParts":{"impact":36.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":8175,"id":"CVE-2026-20512","ts":1788919966234,"field":"cvss","old":null,"new":"6.7"},{"seq":8174,"id":"CVE-2026-20512","ts":1788919966234,"field":"severity","old":"none","new":"medium"},{"seq":7984,"id":"CVE-2026-20512","ts":1788919253899,"field":"cvss","old":"6.7","new":null},{"seq":7983,"id":"CVE-2026-20512","ts":1788919253899,"field":"severity","old":"medium","new":"none"},{"seq":7793,"id":"CVE-2026-20512","ts":1788916327072,"field":"cvss","old":null,"new":"6.7"},{"seq":7792,"id":"CVE-2026-20512","ts":1788916327072,"field":"severity","old":"none","new":"medium"},{"seq":7602,"id":"CVE-2026-20512","ts":1788915271528,"field":"cvss","old":"6.7","new":null},{"seq":7601,"id":"CVE-2026-20512","ts":1788915271528,"field":"severity","old":"medium","new":"none"},{"seq":7411,"id":"CVE-2026-20512","ts":1788912686684,"field":"cvss","old":null,"new":"6.7"},{"seq":7410,"id":"CVE-2026-20512","ts":1788912686684,"field":"severity","old":"none","new":"medium"},{"seq":7220,"id":"CVE-2026-20512","ts":1788911303853,"field":"cvss","old":"6.7","new":null},{"seq":7219,"id":"CVE-2026-20512","ts":1788911303853,"field":"severity","old":"medium","new":"none"},{"seq":7027,"id":"CVE-2026-20512","ts":1788909055563,"field":"cvss","old":null,"new":"6.7"},{"seq":7026,"id":"CVE-2026-20512","ts":1788909055563,"field":"severity","old":"none","new":"medium"},{"seq":6839,"id":"CVE-2026-20512","ts":1788907368115,"field":"cvss","old":"6.7","new":null},{"seq":6838,"id":"CVE-2026-20512","ts":1788907368115,"field":"severity","old":"medium","new":"none"},{"seq":6645,"id":"CVE-2026-20512","ts":1788905422911,"field":"cvss","old":null,"new":"6.7"},{"seq":6644,"id":"CVE-2026-20512","ts":1788905422911,"field":"severity","old":"none","new":"medium"},{"seq":6463,"id":"CVE-2026-20512","ts":1788903436547,"field":"cvss","old":"6.7","new":null},{"seq":6462,"id":"CVE-2026-20512","ts":1788903436547,"field":"severity","old":"medium","new":"none"},{"seq":6259,"id":"CVE-2026-20512","ts":1788901791223,"field":"cvss","old":null,"new":"6.7"},{"seq":6258,"id":"CVE-2026-20512","ts":1788901791223,"field":"severity","old":"none","new":"medium"},{"seq":6089,"id":"CVE-2026-20512","ts":1788899549253,"field":"cvss","old":"6.7","new":null},{"seq":6088,"id":"CVE-2026-20512","ts":1788899549253,"field":"severity","old":"medium","new":"none"},{"seq":5900,"id":"CVE-2026-20512","ts":1788898146333,"field":"cvss","old":null,"new":"6.7"},{"seq":5899,"id":"CVE-2026-20512","ts":1788898146333,"field":"severity","old":"none","new":"medium"},{"seq":5789,"id":"CVE-2026-20512","ts":1788895703260,"field":"cvss","old":"6.7","new":null},{"seq":5788,"id":"CVE-2026-20512","ts":1788895703260,"field":"severity","old":"medium","new":"none"},{"seq":5667,"id":"CVE-2026-20512","ts":1788894520480,"field":"cvss","old":null,"new":"6.7"},{"seq":5666,"id":"CVE-2026-20512","ts":1788894520480,"field":"severity","old":"none","new":"medium"},{"seq":5625,"id":"CVE-2026-20512","ts":1788891864054,"field":"cvss","old":"6.7","new":null},{"seq":5624,"id":"CVE-2026-20512","ts":1788891864054,"field":"severity","old":"medium","new":"none"},{"seq":5595,"id":"CVE-2026-20512","ts":1788890891087,"field":"cvss","old":null,"new":"6.7"},{"seq":5594,"id":"CVE-2026-20512","ts":1788890891087,"field":"severity","old":"none","new":"medium"}]}