CVE-2026-20558

HighCVSS 8.4/10Last modified Nov 3, 2026

Description

In GPU pdma, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11365070; Issue ID: MSV-9547.

Metrics

CVSS 3.1 8.4/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
MediaTek, Inc.MediaTek chipsetMT6993; MT8910

References

Timeline

Published
Nov 2, 2026
Last modified
Nov 3, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-205597.8In GPU pdma, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with User executiCVE-2026-20567.5A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted element is an unknown function of tCVE-2026-205605.3In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connecCVE-2026-205615.3In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has coCVE-2026-205625.3In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has coCVE-2026-205635.3In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of service, if a UE hasCVE-2026-205646.2In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of service with no additCVE-2026-205658.4In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with noCVE-2026-205664.8In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service, if a UE has coCVE-2026-205676.7In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicioCVE-2026-205686.7In afe, there is a possible system crash due to use after free. This could lead to local escalation of privilege if a malicious actor has alCVE-2026-205696.7In adsp, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor
CVE-2026-20558: High severity, CVSS 8.4 | Vulnix