Memory Corruption Vulnerability in AFE by MediaTek

CVE-2026-20573

What is CVE-2026-20573?

A memory corruption vulnerability exists in AFE that can lead to a potential double free condition, enabling local privilege escalation for attackers with system privileges. Exploiting this vulnerability requires no user interaction, making it particularly dangerous. The flaw is linked to Patch ID: ALPS11431412 and Issue ID: MSV-9923, highlighting the need for immediate remediation to secure affected systems.

References