MediaTek NeuroPilot CVE-2026-20522

Exploitation requires local code execution on a device using one of the affected MediaTek chipsets (MT8668, MT8875, MT8781, MT8910, MT6881, MT8188, MT8189, MT6993) with the vulnerable neuropilot component present - typically a locally installed or already-running Android application. Per the CVSS vector (AV:L), it cannot be triggered remotely over a network; the attacker must first have a foothold on the device. On the positive side, PR:N and UI:N mean that once local code runs, no elevated privileges and no user interaction are needed to trigger the out-of-bounds write. The primary limiting factors are the local-access prerequisite and dependence on the specific affected chipset/firmware being present and unpatched.

This is a genuine high-priority local escalation-of-privilege flaw, though not a drop-everything emergency on the raw signals available. The vendor-supplied CVSS:3.1 vector (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 8.4) is internally consistent with the description: an out-of-bounds write (CWE-787) in the MediaTek 'neuropilot' NPU/AI component that an unprivileged local actor can trigger with no user interaction, yielding full confidentiality, integrity and availability impact on the affected system. The local attack vector (AV:L) is the single most important risk-limiting factor - an attacker must already be able to run code on the device (e.g., a malicious or compromised app), so this is a privilege-escalation primitive rather than a remote entry point. No EPSS score was provided in the input, so exploitation probability cannot be quantified. The CVE is NOT listed in CISA KEV and no POC was indicated, so the status is no public exploit identified at time of analysis; MediaTek credits its own security team (security@mediatek.com), consistent with internal discovery rather than observed in-the-wild abuse. Net: a real patch-worthy bug for Android/MediaTek fleets (especially as a second-stage privilege gain in an exploit chain), but with no evidence of active or widespread exploitation at this time.

A user installs a malicious or trojanized Android app that requires no special permissions. The app issues crafted requests to the vulnerable neuropilot interface, triggering the missing bounds check to perform an out-of-bounds write that corrupts memory and elevates the app's privileges to system/kernel level. No public exploit code was identified, and the local attack vector means the attacker must already have code execution on the device.