CVE-2026-20513 - Vulnerability Details - OpenCVE

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Mediatek, Inc.	Mediatek Chipset

No data.

No data.

References

Link	Providers
https://www.mediatek.com/product-security-bulletin/September-2026

History

Mon, 07 Sep 2026 13:45:00 +0000

Type	Values Removed	Values Added
Title		Audio HAL Improper Input Validation Leads to Local Information Disclosure

Mon, 07 Sep 2026 11:30:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 07 Sep 2026 04:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Mediatek, Inc. Mediatek, Inc. mediatek Chipset
Vendors & Products		Mediatek, Inc. Mediatek, Inc. mediatek Chipset

Mon, 07 Sep 2026 02:00:00 +0000

Type	Values Removed	Values Added
Description		In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245.
Weaknesses		CWE-35
References		https://www.mediatek.com/product-security-bulletin/September-2026

MITRE

Status: PUBLISHED

Assigner: MediaTek

Published: 2026-09-07T01:57:30.773Z

Updated: 2026-09-07T10:26:13.824Z

Reserved: 2025-11-03T01:30:59.030Z

Link: CVE-2026-20513

Vulnrichment

Updated: 2026-09-07T10:26:05.704Z

NVD

Status : Deferred

Published: 2026-09-07T02:17:20.040

Modified: 2026-09-08T18:37:41.047

Link: CVE-2026-20513

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20513", "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "state": "PUBLISHED", "assignerShortName": "MediaTek", "dateReserved": "2025-11-03T01:30:59.030Z", "datePublished": "2026-09-07T01:57:30.773Z", "dateUpdated": "2026-09-07T10:26:13.824Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "shortName": "MediaTek", "dateUpdated": "2026-09-07T01:57:30.773Z"}, "descriptions": [{"lang": "en", "value": "In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245."}], "affected": [{"vendor": "MediaTek, Inc.", "product": "MediaTek chipset", "defaultStatus": "unaffected", "versions": [{"version": "MT2718", "status": "affected"}, {"version": "MT6769", "status": "affected"}, {"version": "MT6781", "status": "affected"}, {"version": "MT6789", "status": "affected"}, {"version": "MT6833", "status": "affected"}, {"version": "MT6835", "status": "affected"}, {"version": "MT6853", "status": "affected"}, {"version": "MT6855", "status": "affected"}, {"version": "MT6858", "status": "affected"}, {"version": "MT6877", "status": "affected"}, {"version": "MT6878", "status": "affected"}, {"version": "MT6881", "status": "affected"}, {"version": "MT6886", "status": "affected"}, {"version": "MT6893", "status": "affected"}, {"version": "MT6895", "status": "affected"}, {"version": "MT6897", "status": "affected"}, {"version": "MT6899", "status": "affected"}, {"version": "MT6989", "status": "affected"}, {"version": "MT6991", "status": "affected"}, {"version": "MT6993", "status": "affected"}, {"version": "MT8126", "status": "affected"}, {"version": "MT8168", "status": "affected"}, {"version": "MT8171", "status": "affected"}, {"version": "MT8186", "status": "affected"}, {"version": "MT8188", "status": "affected"}, {"version": "MT8189", "status": "affected"}, {"version": "MT8195", "status": "affected"}, {"version": "MT8196", "status": "affected"}, {"version": "MT8321", "status": "affected"}, {"version": "MT8365", "status": "affected"}, {"version": "MT8367", "status": "affected"}, {"version": "MT8385", "status": "affected"}, {"version": "MT8390", "status": "affected"}, {"version": "MT8391", "status": "affected"}, {"version": "MT8668", "status": "affected"}, {"version": "MT8676", "status": "affected"}, {"version": "MT8678", "status": "affected"}, {"version": "MT8696", "status": "affected"}, {"version": "MT8755", "status": "affected"}, {"version": "MT8766", "status": "affected"}, {"version": "MT8768", "status": "affected"}, {"version": "MT8771", "status": "affected"}, {"version": "MT8775", "status": "affected"}, {"version": "MT8781", "status": "affected"}, {"version": "MT8786", "status": "affected"}, {"version": "MT8788E", "status": "affected"}, {"version": "MT8791T", "status": "affected"}, {"version": "MT8792", "status": "affected"}, {"version": "MT8793", "status": "affected"}, {"version": "MT8796", "status": "affected"}, {"version": "MT8797", "status": "affected"}, {"version": "MT8798", "status": "affected"}, {"version": "MT8799", "status": "affected"}, {"version": "MT8873", "status": "affected"}, {"version": "MT8883", "status": "affected"}, {"version": "MT8893", "status": "affected"}, {"version": "MT8910", "status": "affected"}]}], "references": [{"url": "https://www.mediatek.com/product-security-bulletin/September-2026"}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "cweId": "CWE-35", "description": "CWE-35 Path Traversal: '.../...//'"}]}], "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-09-07T10:26:10.388949Z", "id": "CVE-2026-20513", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-07T10:26:13.824Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-20513", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-07T10:26:10.388949Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-07T10:26:05.704Z"}}], "cna": {"affected": [{"vendor": "MediaTek, Inc.", "product": "MediaTek chipset", "versions": [{"status": "affected", "version": "MT2718"}, {"status": "affected", "version": "MT6769"}, {"status": "affected", "version": "MT6781"}, {"status": "affected", "version": "MT6789"}, {"status": "affected", "version": "MT6833"}, {"status": "affected", "version": "MT6835"}, {"status": "affected", "version": "MT6853"}, {"status": "affected", "version": "MT6855"}, {"status": "affected", "version": "MT6858"}, {"status": "affected", "version": "MT6877"}, {"status": "affected", "version": "MT6878"}, {"status": "affected", "version": "MT6881"}, {"status": "affected", "version": "MT6886"}, {"status": "affected", "version": "MT6893"}, {"status": "affected", "version": "MT6895"}, {"status": "affected", "version": "MT6897"}, {"status": "affected", "version": "MT6899"}, {"status": "affected", "version": "MT6989"}, {"status": "affected", "version": "MT6991"}, {"status": "affected", "version": "MT6993"}, {"status": "affected", "version": "MT8126"}, {"status": "affected", "version": "MT8168"}, {"status": "affected", "version": "MT8171"}, {"status": "affected", "version": "MT8186"}, {"status": "affected", "version": "MT8188"}, {"status": "affected", "version": "MT8189"}, {"status": "affected", "version": "MT8195"}, {"status": "affected", "version": "MT8196"}, {"status": "affected", "version": "MT8321"}, {"status": "affected", "version": "MT8365"}, {"status": "affected", "version": "MT8367"}, {"status": "affected", "version": "MT8385"}, {"status": "affected", "version": "MT8390"}, {"status": "affected", "version": "MT8391"}, {"status": "affected", "version": "MT8668"}, {"status": "affected", "version": "MT8676"}, {"status": "affected", "version": "MT8678"}, {"status": "affected", "version": "MT8696"}, {"status": "affected", "version": "MT8755"}, {"status": "affected", "version": "MT8766"}, {"status": "affected", "version": "MT8768"}, {"status": "affected", "version": "MT8771"}, {"status": "affected", "version": "MT8775"}, {"status": "affected", "version": "MT8781"}, {"status": "affected", "version": "MT8786"}, {"status": "affected", "version": "MT8788E"}, {"status": "affected", "version": "MT8791T"}, {"status": "affected", "version": "MT8792"}, {"status": "affected", "version": "MT8793"}, {"status": "affected", "version": "MT8796"}, {"status": "affected", "version": "MT8797"}, {"status": "affected", "version": "MT8798"}, {"status": "affected", "version": "MT8799"}, {"status": "affected", "version": "MT8873"}, {"status": "affected", "version": "MT8883"}, {"status": "affected", "version": "MT8893"}, {"status": "affected", "version": "MT8910"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.mediatek.com/product-security-bulletin/September-2026"}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-35", "description": "CWE-35 Path Traversal: '.../...//'"}]}], "providerMetadata": {"orgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "shortName": "MediaTek", "dateUpdated": "2026-09-07T01:57:30.773Z"}}}, "cveMetadata": {"cveId": "CVE-2026-20513", "state": "PUBLISHED", "dateUpdated": "2026-09-07T10:26:13.824Z", "dateReserved": "2025-11-03T01:30:59.030Z", "assignerOrgId": "ee979b05-11f8-4f25-a7e0-a1fa9c190374", "datePublished": "2026-09-07T01:57:30.773Z", "assignerShortName": "MediaTek"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "MediaTek chipset", "vendor": "MediaTek, Inc.", "versions": [{"status": "affected", "version": "MT2718"}, {"status": "affected", "version": "MT6769"}, {"status": "affected", "version": "MT6781"}, {"status": "affected", "version": "MT6789"}, {"status": "affected", "version": "MT6833"}, {"status": "affected", "version": "MT6835"}, {"status": "affected", "version": "MT6853"}, {"status": "affected", "version": "MT6855"}, {"status": "affected", "version": "MT6858"}, {"status": "affected", "version": "MT6877"}, {"status": "affected", "version": "MT6878"}, {"status": "affected", "version": "MT6881"}, {"status": "affected", "version": "MT6886"}, {"status": "affected", "version": "MT6893"}, {"status": "affected", "version": "MT6895"}, {"status": "affected", "version": "MT6897"}, {"status": "affected", "version": "MT6899"}, {"status": "affected", "version": "MT6989"}, {"status": "affected", "version": "MT6991"}, {"status": "affected", "version": "MT6993"}, {"status": "affected", "version": "MT8126"}, {"status": "affected", "version": "MT8168"}, {"status": "affected", "version": "MT8171"}, {"status": "affected", "version": "MT8186"}, {"status": "affected", "version": "MT8188"}, {"status": "affected", "version": "MT8189"}, {"status": "affected", "version": "MT8195"}, {"status": "affected", "version": "MT8196"}, {"status": "affected", "version": "MT8321"}, {"status": "affected", "version": "MT8365"}, {"status": "affected", "version": "MT8367"}, {"status": "affected", "version": "MT8385"}, {"status": "affected", "version": "MT8390"}, {"status": "affected", "version": "MT8391"}, {"status": "affected", "version": "MT8668"}, {"status": "affected", "version": "MT8676"}, {"status": "affected", "version": "MT8678"}, {"status": "affected", "version": "MT8696"}, {"status": "affected", "version": "MT8755"}, {"status": "affected", "version": "MT8766"}, {"status": "affected", "version": "MT8768"}, {"status": "affected", "version": "MT8771"}, {"status": "affected", "version": "MT8775"}, {"status": "affected", "version": "MT8781"}, {"status": "affected", "version": "MT8786"}, {"status": "affected", "version": "MT8788E"}, {"status": "affected", "version": "MT8791T"}, {"status": "affected", "version": "MT8792"}, {"status": "affected", "version": "MT8793"}, {"status": "affected", "version": "MT8796"}, {"status": "affected", "version": "MT8797"}, {"status": "affected", "version": "MT8798"}, {"status": "affected", "version": "MT8799"}, {"status": "affected", "version": "MT8873"}, {"status": "affected", "version": "MT8883"}, {"status": "affected", "version": "MT8893"}, {"status": "affected", "version": "MT8910"}]}], "source": "security@mediatek.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245."}], "id": "CVE-2026-20513", "lastModified": "2026-09-08T18:37:41.047", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20513", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-07T10:26:10.388949Z", "version": "2.0.3"}}]}, "published": "2026-09-07T02:17:20.040", "references": [{"source": "security@mediatek.com", "url": "https://www.mediatek.com/product-security-bulletin/September-2026"}], "sourceIdentifier": "security@mediatek.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-35"}], "source": "security@mediatek.com", "type": "Secondary"}]}