CVE-2026-20579

MediumCVSS 6.7/10Last modified Oct 21, 2026

Description

In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9800.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Oct 5, 2026
Last modified: Oct 21, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-20589.8A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown fun CVE-2026-205868.8In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no ad CVE-2026-205876.7In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious CVE-2026-205886.7In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a ma CVE-2026-205896.7In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious acto CVE-2026-20599.8A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown function of the file /e CVE-2026-20609.8A vulnerability was found in code-projects Simple Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functional CVE-2026-206013.3A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.3. An app may be able to monitor keyst CVE-2026-206025.5The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3 CVE-2026-206034.4This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Tahoe 26.3. An app with root privile CVE-2026-206054.6The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, macOS Sequoia 15.7.4, macOS Sono CVE-2026-206067.1This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, mac