Memory Corruption Vulnerability in Afe by MediaTek
CVE-2026-20575

Currently unrated

Key Information:

Vendor

MediaTek
Status
Mediatek Chipset
Vendor
CVE Published:
2 November 2026

What is CVE-2026-20575?

A memory corruption vulnerability exists in Afe, which can lead to local privilege escalation if a malicious actor has gained System privileges. Notably, user interaction is not required for the exploitation of this flaw, making it particularly concerning. Updates and patches are essential to mitigate this risk.

Affected Version(s)

MediaTek chipset MT6739

MediaTek chipset MT6761

MediaTek chipset MT6765

References

https://www.mediatek.com/product-security-bulletin/Novemb...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.