Memory Corruption Vulnerability in Afe by MediaTek
CVE-2026-20574

Currently unrated

Key Information:

Vendor

MediaTek
Status
Mediatek Chipset
Vendor
CVE Published:
2 November 2026

What is CVE-2026-20574?

In Afe, a memory corruption issue arises due to a use after free vulnerability. This flaw can allow local privilege escalation under conditions where a malicious actor already possesses System privileges. Notably, user interaction is not required for this exploitation, emphasizing the potential exploitability of the vulnerability.

Affected Version(s)

MediaTek chipset MT2735

MediaTek chipset MT2737

MediaTek chipset MT6768

References

https://www.mediatek.com/product-security-bulletin/Novemb...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.