CVE-2026-20478: In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interact

unknownCVE-2026-20478

In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981454 (Note: For MT6880, MT6890, MT6988, MT6990) / AUTO00851293 (Note: For MT2735, MT2737); Issue ID: MSV-7638.

Details

Source: NVD Recent CVEs (US · database · site)
Severity: unknown
Published: 2026-08-03
Last updated: 2026-08-03
Exploitation: Not in CISA KEV at last sync

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-20478

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-20478	coverage & exploitation status	NVD · CVE.org

Recent advisories for In Audio HAL

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

unknownCVE-2026-20492: In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This c…nvd · 2026-08-03
unknownCVE-2026-20480: In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This coul…nvd · 2026-08-03

CVE-2026-20478: In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interact

Details

Referenced CVEs

Recent advisories for In Audio HAL

More from NVD Recent CVEs