Use After Free Vulnerability in MediaTek Afe Product

CVE-2026-20568

What is CVE-2026-20568?

In MediaTek's Afe product, a use after free vulnerability has been identified that may cause a system crash. This flaw can lead to local privilege escalation in the event that a malicious actor has already gained system-level privileges. Exploitation does not require user interaction, underscoring the need for immediate remediation. A patch is available under Patch ID: ALPS11439283 and Issue ID: MSV-10003.

References