CVE-2026-20507 | MediaTek MT8910 Audio HAL use after free (ALPS11191981)

A vulnerability was found in MediaTek MT2718, MT6739, MT6761, MT6765, MT6768, MT6769, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6858, MT6877, MT6878, MT6879, MT6881, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT6993, MT8126, MT8168, MT8171, MT8186, MT8188, MT8189, MT8196, MT8321, MT8365, MT8367, MT8385, MT8390, MT8391, MT8668, MT8676, MT8678, MT8696, MT8755, MT8766, MT8766R, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788E, MT8791T, MT8792, MT8796, MT8797, MT8798, MT8799, MT8873, MT8883, MT8893 and MT8910. It has been declared as critical. This impacts an unknown function of the component Audio HAL. Executing a manipulation can lead to use after free.

This vulnerability is handled as CVE-2026-20507. It is possible to launch the attack on the local host. There is not any exploit available.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More