CVE-2026-20553

MediumCVSS 6.8/10Last modified Nov 2, 2026

Description

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11468968; Issue ID: MSV-10166.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 2, 2026
Last modified
Nov 2, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-205547.1In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has conCVE-2026-205555.3In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has conCVE-2026-205567.5In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE CVE-2026-205577.5In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE CVE-2026-205588.4In GPU pdma, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege with no addCVE-2026-205597.8In GPU pdma, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with User executiCVE-2026-20567.5A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of tCVE-2026-205605.3In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connecCVE-2026-205615.3In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has coCVE-2026-205625.3In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has coCVE-2026-205635.3In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service, if a UE hasCVE-2026-205646.2In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with no addit
CVE-2026-20553: Medium severity, CVSS 6.8 | Vulnix