# CVE-2026-20451: In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of… Source: https://junglewise.ai/threats/cve-2026-20451-in-slbc-there-is-a-possible-out-of-bounds-write-due-to-type Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Published: 2026-05-04 License: CC BY 4.0 with a link back CVE-2026-20451 · Severity: medium · CVSS 6.7 · Published 2026-05-04 In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504. Technologies: [MediaTek Mt2718](https://junglewise.ai/threats/technologies/mt2718), [MediaTek Mt2718 Firmware](https://junglewise.ai/threats/technologies/mt2718-firmware), [MediaTek Mt6899](https://junglewise.ai/threats/technologies/mt6899), [MediaTek Mt6899 Firmware](https://junglewise.ai/threats/technologies/mt6899-firmware), [MediaTek Mt6985](https://junglewise.ai/threats/technologies/mt6985), [MediaTek Mt6985 Firmware](https://junglewise.ai/threats/technologies/mt6985-firmware), [MediaTek Mt6989](https://junglewise.ai/threats/technologies/mt6989), [MediaTek Mt6989 Firmware](https://junglewise.ai/threats/technologies/mt6989-firmware), [MediaTek Mt6991](https://junglewise.ai/threats/technologies/mt6991), [MediaTek Mt6991 Firmware](https://junglewise.ai/threats/technologies/mt6991-firmware), [MediaTek Mt8186](https://junglewise.ai/threats/technologies/mt8186), [MediaTek Mt8186 Firmware](https://junglewise.ai/threats/technologies/mt8186-firmware), [MediaTek Mt8188](https://junglewise.ai/threats/technologies/mt8188), [MediaTek Mt8188 Firmware](https://junglewise.ai/threats/technologies/mt8188-firmware), [MediaTek Mt8196](https://junglewise.ai/threats/technologies/mt8196), [MediaTek Mt8196 Firmware](https://junglewise.ai/threats/technologies/mt8196-firmware), [MediaTek Mt8367](https://junglewise.ai/threats/technologies/mt8367), [MediaTek Mt8367 Firmware](https://junglewise.ai/threats/technologies/mt8367-firmware), [MediaTek Mt8370](https://junglewise.ai/threats/technologies/mt8370), [MediaTek Mt8390](https://junglewise.ai/threats/technologies/mt8390), [MediaTek Mt8390 Firmware](https://junglewise.ai/threats/technologies/mt8390-firmware), [MediaTek Mt8391](https://junglewise.ai/threats/technologies/mt8391), [MediaTek Mt8391 Firmware](https://junglewise.ai/threats/technologies/mt8391-firmware), [MediaTek Mt8395](https://junglewise.ai/threats/technologies/mt8395), [MediaTek Mt8395 Firmware](https://junglewise.ai/threats/technologies/mt8395-firmware), [MediaTek MT8676](https://junglewise.ai/threats/technologies/mt8676), [MediaTek Mt8676 Firmware](https://junglewise.ai/threats/technologies/mt8676-firmware), [MediaTek MT8678](https://junglewise.ai/threats/technologies/mt8678), [MediaTek Mt8678 Firmware](https://junglewise.ai/threats/technologies/mt8678-firmware), [MediaTek Mt8766](https://junglewise.ai/threats/technologies/mt8766), [MediaTek Mt8766 Firmware](https://junglewise.ai/threats/technologies/mt8766-firmware), [MediaTek Mt8768](https://junglewise.ai/threats/technologies/mt8768), [MediaTek Mt8768 Firmware](https://junglewise.ai/threats/technologies/mt8768-firmware), [MediaTek MT8775](https://junglewise.ai/threats/technologies/mt8775), [MediaTek Mt8775 Firmware](https://junglewise.ai/threats/technologies/mt8775-firmware), [MediaTek Mt8781](https://junglewise.ai/threats/technologies/mt8781), [MediaTek Mt8781 Firmware](https://junglewise.ai/threats/technologies/mt8781-firmware), [MediaTek Mt8786](https://junglewise.ai/threats/technologies/mt8786), [MediaTek Mt8786 Firmware](https://junglewise.ai/threats/technologies/mt8786-firmware), [MediaTek Mt8788e](https://junglewise.ai/threats/technologies/mt8788e), [MediaTek Mt8788e Firmware](https://junglewise.ai/threats/technologies/mt8788e-firmware), [MediaTek Mt8791t](https://junglewise.ai/threats/technologies/mt8791t), [MediaTek Mt8791t Firmware](https://junglewise.ai/threats/technologies/mt8791t-firmware), [MediaTek MT8792](https://junglewise.ai/threats/technologies/mt8792), [MediaTek Mt8792 Firmware](https://junglewise.ai/threats/technologies/mt8792-firmware), [MediaTek Mt8793](https://junglewise.ai/threats/technologies/mt8793), [MediaTek Mt8793 Firmware](https://junglewise.ai/threats/technologies/mt8793-firmware), [MediaTek MT8796](https://junglewise.ai/threats/technologies/mt8796), [MediaTek Mt8796 Firmware](https://junglewise.ai/threats/technologies/mt8796-firmware), [MediaTek MT8873](https://junglewise.ai/threats/technologies/mt8873), [MediaTek Mt8873 Firmware](https://junglewise.ai/threats/technologies/mt8873-firmware), [MediaTek MT8883](https://junglewise.ai/threats/technologies/mt8883), [MediaTek Mt8883 Firmware](https://junglewise.ai/threats/technologies/mt8883-firmware), [MediaTek MT8893](https://junglewise.ai/threats/technologies/mt8893), [MediaTek Mt8893 Firmware](https://junglewise.ai/threats/technologies/mt8893-firmware), [MediaTek Mt8910](https://junglewise.ai/threats/technologies/mt8910), [MediaTek Mt8910 Firmware](https://junglewise.ai/threats/technologies/mt8910-firmware). Vendors: [MediaTek](https://junglewise.ai/threats/vendors/mediatek). ## Quick answers **Is CVE-2026-20451 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-20451 being exploited in the wild. **How severe is CVE-2026-20451?** Medium severity, with a CVSS score of 6.7, published 4 May 2026. **Which products and versions are affected?** MediaTek Mt2718, MediaTek Mt2718 Firmware, MediaTek Mt6899, MediaTek Mt6899 Firmware and 60 more. The advisory does not name versions. **Is there a fix for CVE-2026-20451?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it. **Am I affected by CVE-2026-20451?** Check whether you run MediaTek Mt2718, MediaTek Mt2718 Firmware, MediaTek Mt6899 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you. ## Affected products - MediaTek Mt2718 - MediaTek Mt2718 Firmware - MediaTek Mt6899 - MediaTek Mt6899 Firmware - MediaTek Mt6985 - MediaTek Mt6985 Firmware - MediaTek Mt6989 - MediaTek Mt6989 Firmware - MediaTek Mt6991 - MediaTek Mt6991 Firmware - MediaTek Mt8115 - MediaTek Mt8115 Firmware - MediaTek Mt8186 - MediaTek Mt8186 Firmware - MediaTek Mt8188 - MediaTek Mt8188 Firmware - MediaTek Mt8196 - MediaTek Mt8196 Firmware - MediaTek Mt8365 - MediaTek Mt8365 Firmware - MediaTek Mt8367 - MediaTek Mt8367 Firmware - MediaTek Mt8370 - MediaTek Mt8370 Firmware - MediaTek Mt8371 - MediaTek Mt8371 Firmware - MediaTek Mt8390 - MediaTek Mt8390 Firmware - MediaTek Mt8391 - MediaTek Mt8391 Firmware - MediaTek Mt8395 - MediaTek Mt8395 Firmware - MediaTek MT8676 - MediaTek Mt8676 Firmware - MediaTek MT8678 - MediaTek Mt8678 Firmware - MediaTek Mt8766 - MediaTek Mt8766 Firmware - MediaTek Mt8768 - MediaTek Mt8768 Firmware - MediaTek MT8775 - MediaTek Mt8775 Firmware - MediaTek Mt8781 - MediaTek Mt8781 Firmware - MediaTek Mt8786 - MediaTek Mt8786 Firmware - MediaTek Mt8788e - MediaTek Mt8788e Firmware - MediaTek Mt8791t - MediaTek Mt8791t Firmware - MediaTek MT8792 - MediaTek Mt8792 Firmware - MediaTek Mt8793 - MediaTek Mt8793 Firmware - MediaTek MT8796 - MediaTek Mt8796 Firmware - MediaTek MT8873 - MediaTek Mt8873 Firmware - MediaTek MT8883 - MediaTek Mt8883 Firmware - MediaTek MT8893 - MediaTek Mt8893 Firmware - MediaTek Mt8910 - MediaTek Mt8910 Firmware ## Related threats - [MediaTek GPU use after free leading to system crash](https://junglewise.ai/threats/cve-2026-20515-mediatek-gpu-use-after-free-leading-to-system-crash) - [MediaTek Modem denial of service due to missing bounds check](https://junglewise.ai/threats/cve-2026-20504-mediatek-modem-denial-of-service-due-to-missing-bounds-check) - [MediaTek Modem system crash due to missing bounds check](https://junglewise.ai/threats/cve-2026-20503-mediatek-modem-system-crash-due-to-missing-bounds-check) - [MediaTek vdec out of bounds write](https://junglewise.ai/threats/cve-2026-20502-mediatek-vdec-out-of-bounds-write) - [MediaTek vdec heap buffer overflow privilege escalation](https://junglewise.ai/threats/cve-2026-20501-mediatek-vdec-heap-buffer-overflow-privilege-escalation)