MediaTek NeuroPilot: Out-of-bounds write enables local privilege escalation
Summary
MediaTek NeuroPilot, the AI/ML framework on several MediaTek chipsets, contains an out-of-bounds write caused by a missing bounds check. A local attacker or malicious app without additional privileges and without user interaction can exploit it to escalate privileges, with high impact on confidentiality, integrity and availability. The main exposure for SMEs is company and BYOD smartphones and tablets that run firmware without the October 2026 security patch level.
Affected
- MediaTek chipsets listed in the CNA record: MT6881, MT6993, MT8188, MT8189, MT8668, MT8781, MT8875, MT8910
- Firmware version ranges: Unknown.
- Affected device models: Unknown; depends on the device maker.
Fixed in
Unknown. Patch ID ALPS11249050 (Issue ID MSV-9172) is referenced in the MediaTek October 2026 bulletin published 5 October 2026. No fixed firmware version is published.
Workaround
Unknown. No vendor workaround is documented.
- Install the device maker's firmware with the October 2026 or later security patch level.
Exploitation
- MediaTek is not aware of any active exploitation in the wild.
- CISA SSVC: exploitation none, automatable no, technical impact total.
- No public proof-of-concept confirmed in the sources reviewed.
Our recommendation
- Inventory mobile devices and identify the chipset (model and hardware variant).
- Ask device makers for firmware with the October 2026 MediaTek bulletin fixes and enforce it via MDM.
- Re-check the MediaTek bulletin and the NVD entry for fixed versions and complete chip tables.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- MediaTek October 2026 Product Security Bulletin www.mediatek.com
- Vulners: CVE-2026-20522 vulners.com
- VulDB: CVE-2026-20522 vuldb.com
- CISA ADP Vulnrichment summary (HOL Guard) hol.org
- Strix: CVE-2026-20522 www.strix.ai
- SecurityOnline: MediaTek October 2026 security bulletin securityonline.info
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 12:56.
Original description (NVD)
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249050; Issue ID: MSV-9172.
NVD references (1)
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.