Use After Free Vulnerability in MediaTek USB Drivers
CVE-2026-20580

Currently unrated

Key Information:

Vendor

MediaTek

Vendor
CVE Published:
2 November 2026

What is CVE-2026-20580?

A vulnerability in MediaTek USB drivers allows for a potential system crash due to use after free conditions. This flaw can lead to a local denial of service if an attacker exploits it, although user interaction is not required for successful exploitation. The vulnerability is particularly concerning because it could allow a malicious actor with System privilege to disrupt operations.

Affected Version(s)

MediaTek chipset MT2735

MediaTek chipset MT2737

MediaTek chipset MT6761

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.