This vulnerability (CVE-2026-20480) involves a heap-based buffer overflow in the Audio HAL of MediaTek chipsets. The flaw can lead to an out-of-bounds write, potentially causing a local denial of service. Exploitation requires local user privileges but no user interaction. Affected chipset models include MT2735, MT2737, MT6880, MT6890, MT6988, and MT6990. Patch identifiers ALPS10960023 and AUTO00851189 are noted for specific models, but no explicit patch availability or remediation level is confirmed in the vendor advisory. The CVSS 3.1 score is 5.5, reflecting medium severity.

The vulnerability allows a local attacker with user execution privileges to trigger a heap buffer overflow in the Audio HAL, resulting in a denial of service condition. There is no impact on confidentiality or integrity reported. No user interaction is required for exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vendor has identified patch IDs related to this issue for specific chipset models, but no official remediation level or patch availability is confirmed in the provided data. Users of affected MediaTek chipsets should monitor vendor communications for updates and apply patches once available.