Memory Corruption Vulnerability in Mediatek USB Products

CVE-2026-20581

What is CVE-2026-20581?

A vulnerability exists in Mediatek USB implementations that may lead to memory corruption due to a use-after-free error. This issue poses risks of local privilege escalation, should a malicious user already possess system-level privileges. Notably, exploitation of this flaw doesn't require user interaction, emphasizing the critical need for timely patches. Mediatek has identified this vulnerability and provided a fix under Patch ID ALPS11411985, with further details available in their security bulletin.

References