CVE-2026-20464: CVE-2026-20464: sınır dışı yazma

Açıklama (NVD)

In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297.

Özet bilgiler

CVSS v3.1

6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

EPSS

%0,50 (yüzdelik 43)

CWE

CWE-787

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• www.mediatek.com
• CWE-787