CVEvulnerability
CVE-2026-20531
8.4 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-10-05
- Last modified
- 2026-10-09
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-416
Description
In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249016; Issue ID: MSV-9169.
Affected configurations
• mediatek mt8910 firmware
• mediatek mt6899 firmware
• mediatek mt6993 firmware
• mediatek mt8668 firmware
• mediatek mt8781 firmware
• mediatek mt8793 firmware
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://www.mediatek.com/product-security-bulletin/October-2026 Vendor Advisory