Memory Corruption Vulnerability in MediaTek GPU Products

CVE-2026-20559

What is CVE-2026-20559?

A memory corruption issue has been identified in the GPU pdma component of MediaTek devices, stemming from a use-after-free condition. This vulnerability allows for potential local privilege escalation with user execution permissions. It does not require user interaction for exploitation, which raises significant security concerns. Users of affected products should apply the relevant security patches issued by MediaTek to mitigate risks associated with this vulnerability.

References