Memory Corruption Vulnerability in MediaTek USB Products

CVE-2026-20582

What is CVE-2026-20582?

A critical memory corruption vulnerability has been identified in MediaTek's USB products, allowing for a potential local escalation of privileges. This flaw arises from improper management of memory allocation and deallocation, specifically a double free condition. Exploitation does not require user interaction, as an attacker gains an advantage by operating within the already compromised system privileges. Implementing the provided patches is essential to mitigate this risk.

References