CVE-2026-20512: MediaTek Audio HAL privilege escalation

CVE-2026-20512 · Severity: medium · CVSS 6.7 · Published 2026-09-07

MediaTek Audio HAL is a low-level software component that manages audio hardware on mobile devices, smart TVs, and IoT appliances. An attacker who already has system-level privileges can exploit improper input validation in this component to escalate their privileges further, potentially gaining unauthorized control over the device's audio subsystem and related functionality. This vulnerability requires the attacker to have already compromised the system to the highest privilege level, limiting immediate risk but posing a threat if initial compromise occurs.

Technologies: MediaTek Audio HAL. Vendors: MediaTek.

Quick answers

Is CVE-2026-20512 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-20512 being exploited in the wild.
How severe is CVE-2026-20512?
Medium severity, with a CVSS score of 6.7, published 7 September 2026.
Which products and versions are affected?
MediaTek Audio HAL See affected chipsets: MT2716, MT6835, MT6858, MT6878, MT6881, MT6897, MT6899, MT6982VB, MT6986, MT6988, MT6991, MT6993, MT8668, MT8676, MT8678, MT8755, MT8775, MT8792, MT8793, MT8863, MT8873, MT8883 and potentially others.
Is there a fix for CVE-2026-20512?
A patch was published on 2026-07: Device OEMs notified at least two months before publication (patch available, ID: ALPS11087540) Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-20512 attacked?
It is attacked with local access, in device firmware.
Am I affected by CVE-2026-20512?
Check whether you run MediaTek Audio HAL at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a privilege escalation flaw in the Audio HAL subsystem caused by improper input validation (CWE-20 or similar). It allows local escalation of privilege by an attacker who already possesses System-level privileges. The attack vector is local and does not require user interaction. An attacker can exploit this to gain additional privileges or execute arbitrary code within the audio hardware abstraction layer. A patch is available (ALPS11087540), and vendors have been notified at least two months prior to publication.

Affected products

  • MediaTek Audio HAL See affected chipsets: MT2716, MT6835, MT6858, MT6878, MT6881, MT6897, MT6899, MT6982VB, MT6986, MT6988, MT6991, MT6993, MT8668, MT8676, MT8678, MT8755, MT8775, MT8792, MT8793, MT8863, MT8873, MT8883 and potentially others

Timeline

  • 2026-09-07: disclosed: CVE-2026-20512 publicly disclosed in MediaTek September 2026 Security Bulletin
  • 2026-07: patched: Device OEMs notified at least two months before publication (patch available, ID: ALPS11087540)

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.