Application Crash in APU from MediaTek Products
CVE-2026-20532

6.2MEDIUM

Key Information:

Vendor

MediaTek
Status
Mediatek Chipset
Vendor
CVE Published:
5 October 2026

What is CVE-2026-20532?

A double free vulnerability in the APU of MediaTek products can cause an unexpected application crash. This issue leads to a local denial of service and can be exploited without requiring user interaction. Patching is crucial for affected versions to prevent potential disruptions in service.

Affected Version(s)

MediaTek chipset MT6899

MediaTek chipset MT6993

MediaTek chipset MT8668

References

https://www.mediatek.com/product-security-bulletin/Octobe...

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.