CVE-2026-20533: CWE-190 Integer Overflow or Wraparound in MediaTek, Inc. MediaTek chipset

This vulnerability involves an integer overflow or wraparound in the display functionality of MediaTek chipsets. The flaw could allow a local attacker with existing System privileges to escalate their privileges further. The vulnerability affects a broad range of MediaTek chipset models explicitly listed. There is no indication of active exploitation in the wild or a CVSS score. The vendor has assigned a patch ID (ALPS11296678) and issue ID (MSV-9167), but no patch availability or remediation details are provided in the input data.

The vulnerability allows local escalation of privilege on affected MediaTek chipsets if the attacker already has System privileges. This could enable the attacker to gain higher privileges or bypass certain security controls locally. No remote exploitation or user interaction is required. There is no evidence of exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vendor has assigned a patch ID, suggesting a fix may exist or is in development, but no explicit confirmation is provided. Users and administrators should monitor MediaTek advisories for updates and apply patches once available.