CVE-2026-20410: 
NixOS vulnerability analysis and mitigation

CVE-2026-20410 is an out-of-bounds write vulnerability in the imgsys component of MediaTek chipsets, affecting devices running Android 15.0. The flaw stems from a missing bounds check and could allow a local attacker who has already obtained System privilege to further escalate privileges. Affected chipsets include MT6897, MT6989, MT8370, MT8390, and MT8395. It was published on February 2, 2026, with a patch released in MediaTek's February 2026 Product Security Bulletin. The CVSS v3.1 base score is 6.7 (Medium) (MediaTek Advisory, Red Hat CVE).

The vulnerability is classified as CWE-787 (Out-of-bounds Write) and resides in the imgsys subsystem of MediaTek's Android kernel components. Due to a missing bounds check, a process operating with System-level privilege can write data beyond the intended memory buffer, potentially corrupting adjacent memory structures. Exploitation requires local access and pre-existing System privilege — no user interaction is needed. The patch is identified as ALPS10362552 (Issue ID: MSV-5760) (MediaTek Advisory).

Successful exploitation could result in high impact to confidentiality, integrity, and availability on the affected device. An attacker with System privilege could leverage this out-of-bounds write to escalate to higher privilege levels (e.g., kernel), potentially gaining full control of the device, accessing sensitive data, or causing system instability. The scope is limited to the local device; no network-based lateral movement is directly implied (MediaTek Advisory).

There is no public proof-of-concept exploit and no evidence of in-the-wild exploitation as of the time of publication. The vulnerability requires the attacker to have already obtained System privilege on the device, significantly limiting the attack surface. The EPSS score is approximately 0.018% (0.000180), reflecting a very low probability of exploitation in the near term. CVE-2026-20410 is not listed in the CISA Known Exploited Vulnerabilities catalog (MediaTek Advisory).

MediaTek has released a patch (Patch ID: ALPS10362552; Issue ID: MSV-5760) as part of the February 2026 Product Security Bulletin. Users and device manufacturers should apply OTA updates incorporating this patch for affected chipsets (MT6897, MT6989, MT8370, MT8390, MT8395) running Android 15.0. As a compensating control, organizations should enforce strict access controls to limit which processes or users can obtain System privilege on affected devices (MediaTek Advisory).