CVE-2026-20532

6.2 Moyenne

Publiée le 05/10/2026 à 04:16 · Modifiée le 09/10/2026 à 16:47 · Analysée par le NVD · Source : security@mediatek.com

Description

In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249024; Issue ID: MSV-9168.

Traduire en français

Produits concernés

MediaTek, Inc. MediaTek chipset
Mediatek mt6899 firmware
Mediatek mt6993 firmware
Mediatek mt8668 firmware
Mediatek mt8781 firmware
Mediatek mt8910 firmware

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.2 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-415

Références

https://www.mediatek.com/product-security-bulletin/October-2026 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories