CVE-2026-20531

HighCVSS 8.4/10Last modified Oct 9, 2026

Description

In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11249016; Issue ID: MSV-9169.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Oct 5, 2026
Last modified
Oct 9, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-205326.2In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution prCVE-2026-205336.7In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a maCVE-2026-205345.3In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has CVE-2026-205356.7In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if CVE-2026-205366.7In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor CVE-2026-205376.7In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor CVE-2026-205385.3In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE hasCVE-2026-205395.3In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has conCVE-2026-20547.5A security flaw has been discovered in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. Impacted is an unknown function of the component Wifi SCVE-2026-205405.3In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has conCVE-2026-205415.3In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE hasCVE-2026-205426.7In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious acto
CVE-2026-20531: High severity, CVSS 8.4 | Vulnix