CWE-787: Out-of-bounds Write vulnerabilities

CVE-2026-25269 is a medium severity vulnerability in Qualcomm Snapdragon products involving an out-of-bounds write due to memory corruption when processing camera requests with excessive batch and IO buffer configurations. This flaw can lead to high impact on confidentiality, integrity, and availability. The vulnerability affects multiple specific Snapdragon versions. No patch information is provided, and no known exploits are reported in the wild.

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade (DFU) download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution during the boot process. This issue could impact the confidentiality, integrity, or availability of affected system.

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This condition could lead to potential impacts on confidentiality, integrity, and availability.

CVE-2026-20530 is an out-of-bounds write vulnerability in MediaTek chipsets caused by a missing bounds check in the display component. This flaw can lead to local privilege escalation if the attacker already has System privileges. Exploitation does not require user interaction. Multiple MediaTek chipset models are affected. The vulnerability has a medium severity rating with a CVSS score of 6.7.

CVE-2026-20529 is an out-of-bounds write vulnerability in MediaTek chipsets' battery component caused by a missing bounds check. It allows local escalation of privilege if the attacker already has System privileges. Exploitation does not require user interaction. The vulnerability affects multiple MediaTek chipset models. The CVSS score is 6.7, indicating medium severity.

CVE-2026-20528 is an out-of-bounds write and read vulnerability in MediaTek chipsets due to a missing bounds check in the ccci component. Exploitation requires local system privilege and user interaction. Successful exploitation can lead to local information disclosure, memory corruption, crashes, or privilege escalation. The vulnerability affects specific MediaTek chipset models including MT2735, MT2737, MT6813, MT6880, MT6890, MT6986, MT6988, and MT6990. The CVSS score is 6.7, indicating a medium severity level.

In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11049530 / ALPS11480843; Issue ID: MSV-7935.

CVE-2026-20588 is an out-of-bounds write vulnerability in the MediaTek chipset's mtee component. It allows local escalation of privilege due to a missing bounds check. Exploitation does not require user interaction but requires the attacker to already have System privilege. The vulnerability affects specific MediaTek chipset models including MT6768, MT6769, MT6789, MT6833, MT6855, MT6877, MT8771, MT8781, and MT8786. The CVSS score is 6.7, indicating a medium severity level.

CVE-2026-20579 is an out-of-bounds write vulnerability in the vdec component of MediaTek chipsets caused by type confusion. Exploitation does not require user interaction but requires the attacker to already have System privilege. Successful exploitation could lead to local escalation of privilege with high impact on confidentiality, integrity, and availability.

CVE-2026-20526 is an out-of-bounds write vulnerability in MediaTek chipsets' modem component caused by a missing bounds check. Exploitation requires user interaction and occurs if a user equipment (UE) connects to a rogue base station controlled by an attacker. This flaw can lead to remote escalation of privilege without needing additional execution privileges.

CVE-2026-20523 is an out-of-bounds write vulnerability in the neuropilot component of MediaTek chipsets. This flaw arises from a missing bounds check, allowing local escalation of privilege without requiring additional execution privileges or user interaction. The vulnerability affects multiple MediaTek chipset models including MT6881, MT6993, MT8188, MT8189, MT8668, MT8781, MT8793, MT8875, and MT8910. It has a high severity rating with a CVSS score of 8.4.

CVE-2026-20522 is a high-severity vulnerability in MediaTek chipsets involving an out-of-bounds write in the neuropilot component due to a missing bounds check. This flaw allows local privilege escalation without requiring user interaction or additional execution privileges. Multiple MediaTek chipset models are affected. No information about an available patch is provided.

CVE-2026-20589 is an out-of-bounds write vulnerability in the MediaTek chipset's video encoding component (venc) caused by type confusion. This flaw could allow a local attacker with existing System privileges to escalate their privileges further without requiring user interaction. The vulnerability affects multiple MediaTek chipset models including MT6768, MT6769, MT6789, MT6833, MT6855, MT6877, MT8771, MT8781, and MT8786. The CVSS score is 6.7, indicating a medium severity level.

CVE-2026-20586 is a high-severity vulnerability in MediaTek chipsets involving an out-of-bounds write in the video decoder (vdec) component due to a missing bounds check. Exploitation requires user interaction and can lead to remote escalation of privilege without needing additional execution privileges.

CVE-2026-20520 is an out-of-bounds write vulnerability in MediaTek chipsets' modem component caused by a missing bounds check. This flaw could allow remote escalation of privilege if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation does not require user interaction or additional execution privileges. The vulnerability affects multiple MediaTek chipset models. The CVSS score is 7.5, indicating high severity.

CVE-2026-20519 is a high-severity vulnerability in MediaTek chipsets caused by an out-of-bounds write due to a missing bounds check in the modem component. This flaw allows remote escalation of privilege if a user equipment (UE) connects to a rogue base station controlled by an attacker. Exploitation does not require user interaction or additional execution privileges. Multiple MediaTek chipset models are affected.

Integer underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.

An out-of-bounds write vulnerability exists in Apache HTTP Server on Windows when processing file paths that use 8.3 short names which may expand to longer paths. This affects Apache HTTP Server versions from 2.4.0 through 2.4.68. The vulnerability could lead to memory corruption due to improper handling of path expansions.

CVE-2026-56153 is a high-severity out-of-bounds write vulnerability in the mod_charset_lite module of Apache HTTP Server versions 2.4.0 through 2.4.68. This vulnerability could lead to memory corruption and potentially impact confidentiality. There are no known exploits reported in the wild at this time.