🕵️ RESEARCH & DEEP DIVES
MediaTek fixes privilege escalation flaw in Audio HAL across dozens of chipsets (CVE-2026-20512)
MediaTek patched a privilege escalation vulnerability in its Audio HAL affecting many of its chipsets.- Affects MediaTek chipsets including MT2718, MT6769/6781/6789/6833/6853/6877/6886/6893/6989 and many MT8xxx series devices
- Improper input validation in Audio HAL allows local escalation of privilege if an attacker has already obtained System privilege
- No user interaction is required for exploitation; tracked as CWE-307 with Patch ID ALPS11087540 (Issue ID MSV-8246)
- Disclosed September 7, 2026 in MediaTek's September 2026 product security bulletin
Risky Bulletin: BEC campaign steals €35 million from French notaries — Risky Business News
sfturing hosp_order Order Cancellation OrderController.java orderRecordsServi... — CVE ThreatInt
sfturing hosp_order Order OrderController.java updateOrderdiseaseInfo authori... — CVE ThreatInt
Integer overflow in the source-bounds check in Memory::init() (src/runtime/Me... — CVE ThreatInt
sfturing hosp_order Order Controller OrderController.java authorizationA weak... — CVE ThreatInt
sfturing hosp_order Password Recovery CommonUserController.java modifyPassWor... — CVE ThreatInt
In geniezone, there is a possible information disclosure due to a missing bou... — CVE ThreatInt
In geniezone, there is a possible escalation of privilege due to use after fr... — CVE ThreatInt
In gpu, there is a possible system crash due to use after free. This could le... — CVE ThreatInt
In Audio HAL, there is a possible information disclosure due to a missing per... — CVE ThreatInt
In Audio HAL, there is a possible information disclosure due to improper inpu... — CVE ThreatInt
In SurfaceFlinger, there is a possible memory corruption due to use after fre... — CVE ThreatInt
In camera middleware, there is a possible escalation of privilege due to doub... — CVE ThreatInt
In Power HAL, there is a possible out of bounds write due to a missing bounds... — CVE ThreatInt
In Power HAL, there is a possible escalation of privilege due to type confusi... — CVE ThreatInt
In Audio HAL, there is a possible escalation of privilege due to use after fr... — CVE ThreatInt
In MiracastService, there is a possible escalation of privilege due to a conf... — CVE ThreatInt
In Modem, there is a possible system crash due to a missing bounds check. Thi... — CVE ThreatInt
Weekly Cybersecurity Newsletter Bulletin – CrowdStrike Falcon, Chrome 0-Day, GPT-6 Astra, Dropbox Breach and 20+ Stories — Cyber Security News
RE: https:// hachyderm.io/@becomingwisest/1 17227536091130823. — @SwiftOnSecurity@infosec.exchange
sticks out tongue. — @SwiftOnSecurity@infosec.exchange
From Padding Oracle to Shell: Unauthenticated RCE in Telerik UI for ASP.NET AJAX — r/netsec
📋 ADVISORIES
- 📄 Source for High-severity out-of-bounds write flaw (CVE-2026-86313) disclosed in Samsung Opensource Walrus — cve.threatint.com