MediaTek NeuroPilot: Out-of-bounds write allows local privilege escalation
Summary
A missing bounds check in the MediaTek NeuroPilot AI software component allows an out-of-bounds write on affected MediaTek chipsets, including MT6881. A local attacker can use this to escalate privileges, with high impact on confidentiality, integrity and availability, and no user interaction is needed. MediaTek reports no known active exploitation, and the attack requires local access, for example through a malicious app or a compromised user session.
Affected
- MediaTek chipsets listed in the CNA record: MT6881, MT6993, MT8188, MT8189, MT8668, MT8781, MT8793, MT8875, MT8910 (default: unaffected)
- Affected firmware or software versions: Unknown.
Fixed in
- Patch ID ALPS11249062 (issue ID MSV-9171), published in the October 2026 MediaTek Security Bulletin.
- Fixed firmware version: Unknown.
- The patch reaches devices through the device maker's firmware update, not as a separate MediaTek download.
Workaround
- Unknown. No vendor workaround is documented.
Exploitation
- MediaTek is not aware of any active exploitation in the wild.
- CISA SSVC: exploitation none, not automatable, total technical impact.
- Public proof-of-concept: not confirmed in the sources reviewed.
Our recommendation
- Identify fleet devices (phones, tablets, IoT or embedded devices) that use MediaTek chipsets listed above.
- Install the device vendor's security update that includes the October 2026 MediaTek patch level, and check the security patch level in device settings.
- Prioritise managed mobile and IoT devices, as local access is required.
- Verify the NVD status and CVSS vector against the CNA and NVD entries.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- MediaTek October 2026 Product Security Bulletin www.mediatek.com
- Vulners: CVE-2026-20523 vulners.com
- CISA ADP Vulnrichment record (hol.org) hol.org
- Strix: CVE-2026-20523 www.strix.ai
- SecurityOnline: MediaTek security bulletin October 2026 securityonline.info
- CyberPress: MediaTek fixes 31 chipset vulnerabilities cyberpress.org
- NeuroPilot (MediaTek) neuropilot.mediatek.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 12:57.
Original description (NVD)
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249062; Issue ID: MSV-9171.
NVD references (1)
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.